Vulnerability · Published May 5, 2025 · Assigned by VulDB
CVE-2025-4255PCMan FTP Server RMD Command buffer overflow
High 7.3
In plain English
A high-severity buffer overflow in FTP Server from PCMan. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.2% (higher than 82% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Severity (CVSS 3.1)7.3High
Exploit odds (30 days)2.2%top 17.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC
Official description
A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. This affects an unknown part of the component RMD Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| PCMan | FTP Server | 2.0.7 |
Weakness: CWE-120, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
References
- VDB-307359 | PCMan FTP Server RMD Command buffer overflow vdb-entry
- VDB-307359 | CTI Indicators (IOB, IOC) signature, permissions-required
- Submit #561623 | PCMan FTP Server 2.0.7 Buffer Overflow third-party-advisory
- https://fitoxs.com/exploit/exploit-52a33c7f018ae348f748582eae6aa7d38b2b5f1f3dc5d3b6793772e1f8223eb0.txt broken-link, exploit