CVE-2025-3379: PCMan FTP Server EPSV Command buffer overflow
Published Apr 7, 2025
·Updated
A vulnerability classified as critical was found in PCMan FTP Server 2.0.7. Affected by this vulnerability is an unknown functionality of the component EPSV Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
PCMan FTP Server
PCMan FTP Server=2.0.7
Event History
Apr 7, 2025
CVE Published
via MITRE·06:31 PM
Data Sourced
via MITRE·06:31 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeakness
Sep 23, 57252
Event
via FIRST·04:35 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-3379?
CVE-2025-3379 is classified as a critical vulnerability.
2
What is the nature of the vulnerability in CVE-2025-3379?
CVE-2025-3379 involves a buffer overflow in the EPSV Command Handler of PCMan FTP Server.
3
How can CVE-2025-3379 be exploited?
CVE-2025-3379 can be exploited remotely by manipulating the affected component.
4
What software versions are affected by CVE-2025-3379?
CVE-2025-3379 affects PCMan FTP Server version 2.0.7.
5
How do I fix CVE-2025-3379?
To fix CVE-2025-3379, update to a patched version of PCMan FTP Server that addresses the buffer overflow issue.