CVE-2025-4871: medium-severity vulnerability in PCMan FTP Server
PCMan FTP Server REST Command buffer overflow
Published · Updated
33Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 6.9epss 1.6%
from disclosure to weapon457 days
Published on NVDMay 18
1st PoC+457d
exploitation probability
1.6%top 24% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component REST Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Affected products
PCMan · FTP Serverpublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/52657unverifiedcve_referencegithub.com/Blu3B3ard/PoC-Pacman-FTP-Server-2.0.7/blob/main/exploit.txtunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — PCMan FTP Server
In the same product, most dangerous first.
CVE-2025-4255MEDIUMPCMan FTP Server RMD Command buffer overflowEPSS 2.1%CVE-2021-4432MEDIUMPCMan FTP Server USER Command denial of serviceEPSS 1.3%CVE-2024-0732MEDIUMPCMan FTP Server STOR Command denial of serviceEPSS 1.1%CVE-2024-0731MEDIUMPCMan FTP Server PUT Command denial of serviceEPSS 1.1%CVE-2024-58299CRITICALPCMan FTP Server 2.0 Remote Buffer Overflow via 'pwd' CommandEPSS 0.8%CVE-2025-4184MEDIUMPCMan FTP Server QUOTE Command buffer overflowEPSS 0.8%