CVE-2025-3380: PCMan FTP Server FEAT Command buffer overflow

Published Apr 7, 2025

Updated

A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. Affected by this issue is some unknown functionality of the component FEAT Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

PCMan FTP Server

PCMan FTP Server=2.0.7

Event History

Apr 7, 2025

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeakness

Sep 23, 57252

Event

via FIRST·04:35 PM

Frequently Asked Questions

What is the severity of CVE-2025-3380?

CVE-2025-3380 is classified as a critical vulnerability.

How does CVE-2025-3380 affect PCMan FTP Server?

CVE-2025-3380 affects the FEAT Command Handler component of PCMan FTP Server by allowing a buffer overflow.

Can CVE-2025-3380 be exploited remotely?

Yes, the exploit for CVE-2025-3380 can be launched remotely.

What are the potential consequences of exploiting CVE-2025-3380?

Exploiting CVE-2025-3380 could allow an attacker to execute arbitrary code or crash the application.

How can I mitigate the risk of CVE-2025-3380 in my environment?

To mitigate the risk of CVE-2025-3380, it is recommended to update to a patched version of PCMan FTP Server as soon as available.