PT-2025-23709 · Unknown · Freefloat Ftp Server

Fernando Mengali · Published 2025-06-04 · Updated 2025-06-24 · CVE-2025-5549

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FreeFloat FTP Server version 1.0

Description A critical issue has been identified in the PASV Command Handler component of the software, leading to a buffer overflow when manipulated. This can be exploited remotely. The exploit has been publicly disclosed and may be utilized.

Recommendations For FreeFloat FTP Server version 1.0, consider disabling the PASV Command Handler functionality as a temporary workaround until a patch is available. Restrict access to the affected component to minimize the risk of exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

CVE-2025-5549

Affected Products

Freefloat Ftp Server

References · 11

• 🔥 https://fitoxs.com/exploit/exploit-db8a685cdd982cfdfd1844a3f6cb0c497843e401fb1b1cc33f6c1c3190b973ad.txt · Exploit
• https://osv.dev/vulnerability/CVE-2025-5549 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-5549 · Security Note
• https://t.me/cvenotify/124554 · Telegram Post
• https://vuldb.com/?submit.586983 · Note
• https://twitter.com/cracbot/status/1932029956407853516 · Twitter Post
• https://t.me/cvetracker/25336 · Telegram Post
• https://vuldb.com/?ctiid.310999 · Note
• https://t.me/latest_high_impact_cve/2531 · Telegram Post
• https://t.me/cvenotify/126521 · Telegram Post
• https://vuldb.com/?id.310999 · Note