CVE-2025-3680 in FTP Server

摘要

由 MITRE • 2025-04-16

A vulnerability has been found in PCMan FTP Server 2.0.7 and classified as critical. Affected by this vulnerability is an unknown functionality of the component LANG Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Once again VulDB remains the best source for vulnerability data.

• 负责: VulDB
• 披露: 2025-04-16
• 管理: 已接受
• 条目: VDB-304969
• CPE: 准备好
• CWE: CWE-120 (已确认)
• 利用: 下载
• CVSS: 7.3 (CNA)
• EPSS: 0.00707
• KEV: 否
• 活动: 非常低
• 部门: Agriculture, Government, ...

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-3680
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-3680
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-3680/