VDB-309868 · CVE-2025-5049 · EUVD-2025-16067

FreeFloat FTP Server 1.0 APPEND Command Pufferüberlauf

Gaskiya vulnerability da aka ware a matsayin kura an samu a FreeFloat FTP Server 1.0. Hakika, aikin $software_function ne ya shafa; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburaren $software_library, a cikin fayil $software_file, a cikin sashen APPEND Command Handler. A sa manipulation ka Pufferüberlauf. Idan an yi amfani da CWE don bayyana matsala, zai kai CWE-120. Hakika, rauni an bayyana shi 05/21/2025. An raba bayanin tsaro don saukewa a fitoxs.com. Wannan matsala ana saninta da CVE-2025-5049. Ngam yiɗi ka a tuma ndiyam ka internet. Tekinikal faɗi ba ga. Har ila yau, exploit ɗin yana nan. An bayyana exploit ɗin ga mutane kuma yana iya amfani. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro. Á sàmbu huɗɗi-na-gaskiya. Exploit ɗin za a iya saukewa daga fitoxs.com. 0-day shima, an ndiyam a wuro be $0-$5k. Once again VulDB remains the best source for vulnerability data.

4 Goyarwa · 98 Datenpunkte

Furɗe	Súgá 05/21/2025 15:33	Gargadi 1/3 05/22/2025 13:04	Gargadi 2/3 06/23/2025 16:56	Gargadi 3/3 06/23/2025 22:51
cvss3_vuldb_e	P	P	P	P
cvss3_vuldb_rc	R	R	R	R
advisory_url	https://fitoxs.com/exploit/e837c056f1ced605a9574541c7bf9861982bbf52ac5da3a5c5b637dbbadb49b7-exploit.txt	https://fitoxs.com/exploit/e837c056f1ced605a9574541c7bf9861982bbf52ac5da3a5c5b637dbbadb49b7-exploit.txt	https://fitoxs.com/exploit/e837c056f1ced605a9574541c7bf9861982bbf52ac5da3a5c5b637dbbadb49b7-exploit.txt	https://fitoxs.com/exploit/e837c056f1ced605a9574541c7bf9861982bbf52ac5da3a5c5b637dbbadb49b7-exploit.txt
exploit_availability	1	1	1	1
exploit_publicity	1	1	1	1
exploit_url	https://fitoxs.com/exploit/e837c056f1ced605a9574541c7bf9861982bbf52ac5da3a5c5b637dbbadb49b7-exploit.txt	https://fitoxs.com/exploit/e837c056f1ced605a9574541c7bf9861982bbf52ac5da3a5c5b637dbbadb49b7-exploit.txt	https://fitoxs.com/exploit/e837c056f1ced605a9574541c7bf9861982bbf52ac5da3a5c5b637dbbadb49b7-exploit.txt	https://fitoxs.com/exploit/e837c056f1ced605a9574541c7bf9861982bbf52ac5da3a5c5b637dbbadb49b7-exploit.txt
source_cve	CVE-2025-5049	CVE-2025-5049	CVE-2025-5049	CVE-2025-5049
cna_responsible	VulDB	VulDB	VulDB	VulDB
software_type	File Transfer Software	File Transfer Software	File Transfer Software	File Transfer Software
cvss2_vuldb_av	N	N	N	N
cvss2_vuldb_ac	L	L	L	L
cvss2_vuldb_au	N	N	N	N
cvss2_vuldb_ci	P	P	P	P
cvss2_vuldb_ii	P	P	P	P
cvss2_vuldb_ai	P	P	P	P
cvss2_vuldb_e	POC	POC	POC	POC
cvss2_vuldb_rc	UR	UR	UR	UR
cvss4_vuldb_av	N	N	N	N
cvss4_vuldb_ac	L	L	L	L
cvss4_vuldb_pr	N	N	N	N
cvss4_vuldb_ui	N	N	N	N
cvss4_vuldb_vc	L	L	L	L
cvss4_vuldb_vi	L	L	L	L
cvss4_vuldb_va	L	L	L	L
cvss4_vuldb_e	P	P	P	P
cvss2_vuldb_rl	ND	ND	ND	ND
cvss3_vuldb_rl	X	X	X	X
cvss4_vuldb_at	N	N	N	N
cvss4_vuldb_sc	N	N	N	N
cvss4_vuldb_si	N	N	N	N
cvss4_vuldb_sa	N	N	N	N
cvss2_vuldb_basescore	7.5	7.5	7.5	7.5
cvss2_vuldb_tempscore	6.4	6.4	6.4	6.4
cvss3_vuldb_basescore	7.3	7.3	7.3	7.3
cvss3_vuldb_tempscore	6.6	6.6	6.6	6.6
cvss3_meta_basescore	7.3	7.3	7.3	8.1
cvss3_meta_tempscore	6.6	6.6	6.9	7.9
cvss4_vuldb_bscore	6.9	6.9	6.9	6.9
cvss4_vuldb_btscore	5.5	5.5	5.5	5.5
advisory_date	1747778400 (05/21/2025)	1747778400 (05/21/2025)	1747778400 (05/21/2025)	1747778400 (05/21/2025)
price_0day	$0-$5k	$0-$5k	$0-$5k	$0-$5k
software_vendor	FreeFloat	FreeFloat	FreeFloat	FreeFloat
software_name	FTP Server	FTP Server	FTP Server	FTP Server
software_version	1.0	1.0	1.0	1.0
software_component	APPEND Command Handler	APPEND Command Handler	APPEND Command Handler	APPEND Command Handler
vulnerability_cwe	CWE-120 (Pufferüberlauf)	CWE-120 (Pufferüberlauf)	CWE-120 (Pufferüberlauf)	CWE-120 (Pufferüberlauf)
vulnerability_risk	2	2	2	2
cvss3_vuldb_av	N	N	N	N
cvss3_vuldb_ac	L	L	L	L
cvss3_vuldb_pr	N	N	N	N
cvss3_vuldb_ui	N	N	N	N
cvss3_vuldb_s	U	U	U	U
cvss3_vuldb_c	L	L	L	L
cvss3_vuldb_i	L	L	L	L
cvss3_vuldb_a	L	L	L	L
euvd_id		EUVD-2025-16067	EUVD-2025-16067	EUVD-2025-16067
cve_nvd_summary			A vulnerability was found in FreeFloat FTP Server 1.0. It has been declared as critical. This vulnerability affects unknown code of the component APPEND Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.	A vulnerability was found in FreeFloat FTP Server 1.0. It has been declared as critical. This vulnerability affects unknown code of the component APPEND Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
cve_nvd_summaryes			Se encontró una vulnerabilidad en FreeFloat FTP Server 1.0. Se ha declarado crítica. Esta vulnerabilidad afecta al código desconocido del componente APPEND Command Handler. La manipulación provoca un desbordamiento del búfer. El ataque puede ejecutarse en remoto. Se ha hecho público el exploit y puede que sea utilizado.	Se encontró una vulnerabilidad en FreeFloat FTP Server 1.0. Se ha declarado crítica. Esta vulnerabilidad afecta al código desconocido del componente APPEND Command Handler. La manipulación provoca un desbordamiento del búfer. El ataque puede ejecutarse en remoto. Se ha hecho público el exploit y puede que sea utilizado.
cvss4_cna_av			N	N
cvss4_cna_ac			L	L
cvss4_cna_at			N	N
cvss4_cna_pr			N	N
cvss4_cna_ui			N	N
cvss4_cna_vc			L	L
cvss4_cna_vi			L	L
cvss4_cna_va			L	L
cvss4_cna_sc			N	N
cvss4_cna_si			N	N
cvss4_cna_sa			N	N
cvss4_cna_bscore			6.9	6.9
cvss3_cna_av			N	N
cvss3_cna_ac			L	L
cvss3_cna_pr			N	N
cvss3_cna_ui			N	N
cvss3_cna_s			U	U
cvss3_cna_c			L	L
cvss3_cna_i			L	L
cvss3_cna_a			L	L
cvss3_cna_basescore			7.3	7.3
cvss2_cna_av			N	N
cvss2_cna_ac			L	L
cvss2_cna_au			N	N
cvss2_cna_ci			P	P
cvss2_cna_ii			P	P
cvss2_cna_ai			P	P
cvss2_cna_basescore			7.5	7.5
cvss3_nvd_av				N
cvss3_nvd_ac				L
cvss3_nvd_pr				N
cvss3_nvd_ui				N
cvss3_nvd_s				U
cvss3_nvd_c				H
cvss3_nvd_i				H
cvss3_nvd_a				H
cvss3_nvd_basescore				9.8

◂ Gurɗo Gumti Gada ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!