CVE-2025-3378: PCMan FTP Server EPRT Command buffer overflow
Published Apr 7, 2025
·Updated
A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. Affected is an unknown function of the component EPRT Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
PCMan FTP Server
PCMan FTP Server=2.0.7
Event History
Apr 7, 2025
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Sep 23, 57252
Event
via FIRST·04:34 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-3378?
CVE-2025-3378 is classified as a critical vulnerability.
2
How does CVE-2025-3378 affect PCMan FTP Server?
CVE-2025-3378 affects the EPRT Command Handler component of PCMan FTP Server, leading to a potential buffer overflow.
3
Can CVE-2025-3378 be exploited remotely?
Yes, CVE-2025-3378 can be exploited remotely.
4
How do I fix CVE-2025-3378?
To fix CVE-2025-3378, update PCMan FTP Server to the latest version that addresses this vulnerability.
5
What is the potential impact of exploiting CVE-2025-3378?
Exploiting CVE-2025-3378 may allow an attacker to execute arbitrary code on the affected system.