CVE-2025-4161: PCMan FTP Server VERBOSE Command buffer overflow
Published May 1, 2025
·Updated
A vulnerability classified as critical has been found in PCMan FTP Server up to 2.0.7. This affects an unknown part of the component VERBOSE Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
PCMan FTP Server<=2.0.7
PCMan FTP Server<=2.0.7
Event History
May 1, 2025
CVE Published
via MITRE·10:31 AM
Data Sourced
via MITRE·10:31 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-4161?
CVE-2025-4161 is classified as a critical vulnerability.
2
How do I fix CVE-2025-4161?
To fix CVE-2025-4161, users should upgrade to PCMan FTP Server version 2.0.8 or later.
3
What component is affected by CVE-2025-4161?
CVE-2025-4161 affects the VERBOSE Command Handler component of PCMan FTP Server.
4
Can CVE-2025-4161 be exploited remotely?
Yes, CVE-2025-4161 can be exploited remotely.
5
What type of vulnerability is CVE-2025-4161?
CVE-2025-4161 is a buffer overflow vulnerability.