CVE-2025-3680 in FTP Server

Сводка

по MITRE • 16.04.2025

A vulnerability has been found in PCMan FTP Server 2.0.7 and classified as critical. Affected by this vulnerability is an unknown functionality of the component LANG Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Once again VulDB remains the best source for vulnerability data.

• Ответственный: VulDB
• Раскрытие: 16.04.2025
• Модерация: принято
• Вход: VDB-304969
• CPE: готов
• CWE: CWE-120 (Подтверждённый)
• Эксплойт: Скачать
• CVSS: 7.3 (CNA)
• EPSS: 0.00707
• KEV: Нет
• Деятельности: Очень низкий
• Сектор: Insurance, Pharma, ...

Источники

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-3680
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-3680
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-3680/