PT-2025-18967 · Unknown · Pcman Ftp Server

Fernando Mengali

·

Published

2025-04-17

·

Updated

2025-05-16

·

CVE-2025-4253

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions PCMan FTP Server version 2.0.7
Description A critical vulnerability was found in the HASH Command Handler component of PCMan FTP Server. The manipulation of this component leads to a buffer overflow. This issue can be exploited remotely, and the exploit has been disclosed to the public. The vulnerability affects an unknown functionality of the component.
Recommendations For PCMan FTP Server version 2.0.7, consider disabling the HASH Command Handler component until a patch is available to prevent buffer overflow exploitation. Restrict access to the server to minimize the risk of remote attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-119CWE-120

Related Identifiers

BDU:2025-05266
CVE-2025-4253

Affected Products

Pcman Ftp Server