CVE-2025-4288: PCMan FTP Server RNFR Command buffer overflow
Published May 5, 2025
·Updated
A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. This affects an unknown part of the component RNFR Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
PCMan FTP Server
PCMan FTP Server=2.0.7
Event History
May 5, 2025
CVE Published
via MITRE·08:31 PM
Data Sourced
via MITRE·08:31 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-4288?
CVE-2025-4288 is classified as a critical vulnerability.
2
What does CVE-2025-4288 affect?
CVE-2025-4288 affects the RNFR Command Handler component of PCMan FTP Server 2.0.7.
3
What type of vulnerability is CVE-2025-4288?
CVE-2025-4288 is a buffer overflow vulnerability that can be exploited remotely.
4
How can I fix CVE-2025-4288?
To fix CVE-2025-4288, update your PCMan FTP Server to the latest version that addresses this vulnerability.
5
Is CVE-2025-4288 easy to exploit?
Yes, CVE-2025-4288 can be exploited remotely, making it a significant security risk.