Hakika vulnerability da aka rarraba a matsayin kura an gano a PCMan FTP Server 2.0.7. Tabbas, aikin $software_function ne ke da matsala; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburare $software_library, a cikin fayil $software_file, a cikin sashi MODE Command Handler. Wuro manipulation ga Pufferüberlauf. Amfani da CWE wajen bayyana matsala yana kaiwa CWE-120. Lalle, rauni an sanar da shi 04/16/2025. Ana samun bayanin tsaro don saukewa a fitoxs.com. Ana kiran wannan rauni da CVE-2025-3681. Ngam yiɗi ka a tuma ndiyam ka nder layi. Bayani na fasaha ba ga. Kuma, akwai exploit. Exploit ɗin an bayyana wa jama'a, za a iya amfani da shi. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro. Á yí huɗɗi-na-gaskiya. Za a iya samun exploit a fitoxs.com. 0-day ga, an ndiyam a wuro be $0-$5k. If you want to get best quality of vulnerability data, you may have to visit VulDB.
2 Goyarwa · 85 Datenpunkte
| Furɗe | Súgá 04/16/2025 03:14 | Gargadi 1/1 04/16/2025 14:58 |
|---|---|---|
| software_vendor | PCMan | PCMan |
| software_name | FTP Server | FTP Server |
| software_version | 2.0.7 | 2.0.7 |
| software_component | MODE Command Handler | MODE Command Handler |
| vulnerability_cwe | CWE-120 (Pufferüberlauf) | CWE-120 (Pufferüberlauf) |
| vulnerability_risk | 2 | 2 |
| cvss3_vuldb_av | N | N |
| cvss3_vuldb_ac | L | L |
| cvss3_vuldb_pr | N | N |
| cvss3_vuldb_ui | N | N |
| cvss3_vuldb_s | U | U |
| cvss3_vuldb_c | L | L |
| cvss3_vuldb_i | L | L |
| cvss3_vuldb_a | L | L |
| cvss3_vuldb_e | P | P |
| cvss3_vuldb_rc | R | R |
| advisory_url | https://fitoxs.com/exploit/exploit-f2dbb39791fbe7e94d805312769e84cb.txt | https://fitoxs.com/exploit/exploit-f2dbb39791fbe7e94d805312769e84cb.txt |
| exploit_availability | 1 | 1 |
| exploit_publicity | 1 | 1 |
| exploit_url | https://fitoxs.com/exploit/exploit-f2dbb39791fbe7e94d805312769e84cb.txt | https://fitoxs.com/exploit/exploit-f2dbb39791fbe7e94d805312769e84cb.txt |
| source_cve | CVE-2025-3681 | CVE-2025-3681 |
| cna_responsible | VulDB | VulDB |
| software_type | File Transfer Software | File Transfer Software |
| cvss2_vuldb_av | N | N |
| cvss2_vuldb_ac | L | L |
| cvss2_vuldb_au | N | N |
| cvss2_vuldb_ci | P | P |
| cvss2_vuldb_ii | P | P |
| cvss2_vuldb_ai | P | P |
| cvss2_vuldb_e | POC | POC |
| cvss2_vuldb_rc | UR | UR |
| cvss4_vuldb_av | N | N |
| cvss4_vuldb_ac | L | L |
| cvss4_vuldb_pr | N | N |
| cvss4_vuldb_ui | N | N |
| cvss4_vuldb_vc | L | L |
| cvss4_vuldb_vi | L | L |
| cvss4_vuldb_va | L | L |
| cvss4_vuldb_e | P | P |
| cvss2_vuldb_rl | ND | ND |
| cvss3_vuldb_rl | X | X |
| cvss4_vuldb_at | N | N |
| cvss4_vuldb_sc | N | N |
| cvss4_vuldb_si | N | N |
| cvss4_vuldb_sa | N | N |
| cvss2_vuldb_basescore | 7.5 | 7.5 |
| cvss2_vuldb_tempscore | 6.4 | 6.4 |
| cvss3_vuldb_basescore | 7.3 | 7.3 |
| cvss3_vuldb_tempscore | 6.6 | 6.6 |
| cvss3_meta_basescore | 7.3 | 7.3 |
| cvss3_meta_tempscore | 6.6 | 6.9 |
| cvss4_vuldb_bscore | 6.9 | 6.9 |
| cvss4_vuldb_btscore | 5.5 | 5.5 |
| advisory_date | 1744754400 (04/16/2025) | 1744754400 (04/16/2025) |
| price_0day | $0-$5k | $0-$5k |
| cvss3_cna_pr | N | |
| cvss3_cna_ui | N | |
| cvss3_cna_s | U | |
| cvss3_cna_c | L | |
| cvss3_cna_i | L | |
| cvss3_cna_a | L | |
| cvss3_cna_basescore | 7.3 | |
| cvss2_cna_av | N | |
| cvss2_cna_ac | L | |
| cvss2_cna_au | N | |
| cvss2_cna_ci | P | |
| cvss2_cna_ii | P | |
| cvss2_cna_ai | P | |
| cvss2_cna_basescore | 7.5 | |
| cve_nvd_summary | A vulnerability was found in PCMan FTP Server 2.0.7 and classified as critical. Affected by this issue is some unknown functionality of the component MODE Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. | |
| cvss4_cna_av | N | |
| cvss4_cna_ac | L | |
| cvss4_cna_at | N | |
| cvss4_cna_pr | N | |
| cvss4_cna_ui | N | |
| cvss4_cna_vc | L | |
| cvss4_cna_vi | L | |
| cvss4_cna_va | L | |
| cvss4_cna_sc | N | |
| cvss4_cna_si | N | |
| cvss4_cna_sa | N | |
| cvss4_cna_bscore | 6.9 | |
| cvss3_cna_av | N | |
| cvss3_cna_ac | L |