CVE-2025-3681: PCMan FTP Server MODE Command buffer overflow
Published Apr 16, 2025
·Updated
A vulnerability was found in PCMan FTP Server 2.0.7 and classified as critical. Affected by this issue is some unknown functionality of the component MODE Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
PCMan FTP Server
PCMan FTP Server=2.0.7
Event History
Apr 16, 2025
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeakness
May 17, 57277
Event
via FIRST·10:28 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-3681?
CVE-2025-3681 is classified as a critical severity vulnerability.
2
How does CVE-2025-3681 affect PCMan FTP Server?
CVE-2025-3681 affects the MODE Command Handler functionality, leading to potential buffer overflow issues.
3
Can CVE-2025-3681 be exploited remotely?
Yes, CVE-2025-3681 can be exploited remotely.
4
What consequence can arise from exploiting CVE-2025-3681?
Exploiting CVE-2025-3681 may allow an attacker to execute arbitrary code on the affected system.
5
How can I mitigate CVE-2025-3681?
Mitigation for CVE-2025-3681 requires updating to a patched version of PCMan FTP Server that addresses the vulnerability.