Vulnerability · Published Jan 16, 2024 · Assigned by VulDB
CVE-2021-4432PCMan FTP Server USER Command denial of service
Medium 5.3
In plain English
A medium-severity security flaw in FTP Server from PCMan. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 71% of all known vulnerabilities).
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)1.3%top 28.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as problematic. This affects an unknown part of the component USER Command Handler. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250719.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| PCMan | FTP Server | 2.0.7 |
Weakness: CWE-404 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
References
- https://vuldb.com/?id.250719 vdb-entry
- https://vuldb.com/?ctiid.250719 signature, permissions-required
- https://packetstormsecurity.com/files/163104/PCMan-FTP-Server-2.0.7-Denial-Of-Service.html related
- https://0day.today/exploit/description/36412 exploit