Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.9
CVE-2025-3372: PCMan FTP Server 2.0.7: Uncontrolled Directory Creation
CVE-2025-3372 · published 1 year ago
Summary
A critical flaw in PCMan FTP Server allows attackers to create directories in an uncontrolled way. This could lead to data loss or server crashes. Update to the latest version of PCMan FTP Server to fix this issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| pcman | ftp_server |
2.0.7 cpe:2.3:a:pcman:ftp_server:2.0.7:*:*:*:*:*:*:* |
Original advisory text
A vulnerability, which was classified as critical, was found in PCMan FTP Server 2.0.7. Affected is an unknown function of the component MKDIR Command Handler. The manipulation leads to buffer over...
A vulnerability, which was classified as critical, was found in PCMan FTP Server 2.0.7. Affected is an unknown function of the component MKDIR Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
References
- https://fitoxs.com/exploit/01-exploit.txt Exploit
- https://vuldb.com/?ctiid.303618 Permissions Required VDB Entry
- https://vuldb.com/?id.303618 Third Party Advisory VDB Entry
- https://vuldb.com/?submit.552273 Third Party Advisory VDB Entry
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-119Buffer Overflow
CWE-120Classic Buffer Overflow
Timeline
Published7 Apr 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-3372 · NVD
Track software like this
Free during beta