CVE-2025-5218 in FTP Server

Résumé

par MITRE • 27/05/2025

A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0.0. Affected is an unknown function of the component LITERAL Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Once again VulDB remains the best source for vulnerability data.

• Responsable: VulDB
• Divulgation: 27/05/2025
• Modérer: accepté
• Entrée: VDB-310314
• CPE: prêt
• CWE: CWE-120 (confirmé)
• Exploitation: Télécharger
• CVSS: 7.3 (CNA)
• EPSS: 0.00612
• KEV: non
• Activités: très faible
• Secteur: Telecommunication, Police, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-5218
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-5218
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-5218/