CVE-2025-4288: falha de média gravidade em PCMan FTP Server
PCMan FTP Server RNFR Command buffer overflow
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.7%
A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. This affects an unknown part of the component RNFR Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Produtos afetados
PCMan · FTP ServerCVEs relacionadas — PCMan FTP Server
No mesmo produto, das mais perigosas para as menos.
CVE-2025-4255MEDIUMPCMan FTP Server RMD Command buffer overflowEPSS 2.2%CVE-2025-4871MEDIUMPCMan FTP Server REST Command buffer overflowEPSS 1.7%CVE-2021-4432MEDIUMPCMan FTP Server USER Command denial of serviceEPSS 1.3%CVE-2024-0732MEDIUMPCMan FTP Server STOR Command denial of serviceEPSS 1.1%CVE-2024-0731MEDIUMPCMan FTP Server PUT Command denial of serviceEPSS 1.1%CVE-2024-58299CRITICALPCMan FTP Server 2.0 Remote Buffer Overflow via 'pwd' CommandEPSS 0.9%