CVE-2025-4289 in FTP Server

Summary

by MITRE • 05/06/2025

A vulnerability classified as critical was found in PCMan FTP Server 2.0.7. This vulnerability affects unknown code of the component RNTO Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsible: VulDB
• Disclosure: 05/06/2025
• Moderation: accepted
• Entry: VDB-307396
• CPE: ready
• CWE: CWE-120 (confirmed)
• Exploit: Download
• CVSS: 7.3 (VulDB)
• EPSS: 0.00612
• KEV: no
• Activities: very low
• Sector: Chemical, Pharma, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-4289
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-4289
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-4289/