CVE-2025-3683: PCMan FTP Server SIZE Command buffer overflow

Published Apr 16, 2025

Updated

A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. This vulnerability affects unknown code of the component SIZE Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

PCMan FTP Server

PCMan FTP Server=2.0.7

Event History

Apr 16, 2025

CVE Published

via MITRE·10:31 AM

Data Sourced

via MITRE·10:31 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·11:15 AM

DescriptionSeverityWeakness

May 17, 57277

Event

via FIRST·10:27 PM

Frequently Asked Questions

What is the severity of CVE-2025-3683?

CVE-2025-3683 is classified as a critical vulnerability due to its potential impact.

How does CVE-2025-3683 affect PCMan FTP Server?

CVE-2025-3683 affects the SIZE Command Handler component in PCMan FTP Server, leading to a buffer overflow.

Can CVE-2025-3683 be exploited remotely?

Yes, the vulnerability CVE-2025-3683 can be exploited remotely by an attacker.

What are the potential consequences of exploiting CVE-2025-3683?

Exploiting CVE-2025-3683 may allow an attacker to execute arbitrary code on the affected system.

How do I fix CVE-2025-3683 in PCMan FTP Server?

To fix CVE-2025-3683, update PCMan FTP Server to the latest version that addresses this vulnerability.