CVE-2025-3379 MEDIUM

CVE-2025-3379: PCMan FTP Server EPSV Command buffer overflow

Vendor Pcman

Product FTP Server

Weakness CWE-120

Published April 7, 2025

Last update April 7, 2025

View on NVD All CVEs

CVSS base score

6.9/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability classified as critical was found in PCMan FTP Server 2.0.7. Affected by this vulnerability is an unknown functionality of the component EPSV Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Key dates

02Disclosure timeline

April 7, 2025 CVE published

April 7, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-3379 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/120.html

Related vulnerabilities

04Related CVE

CVE-2021-0249 Junos OS: SRX Series: A remote attacker may be able to cause a PFE buffer overflow to arbitrarily remotely execute code or commands on the target device with UTM enabled. CVE-2022-20945 Cisco Catalyst 9100 Series Access Points Association Request Denial of Service Vulnerability CVE-2025-23234 Arkcompiler Ets Runtime has a buffer overflow vulnerability CVE-2024-9515 D-Link DIR-605L formSetQoS buffer overflow CVE-2022-41966 XStream Denial of Service via stack overflow