{"id":2758,"date":"2025-05-03T12:34:39","date_gmt":"2025-05-03T12:34:39","guid":{"rendered":"http:\/\/localhost\/?p=2758"},"modified":"2025-05-03T12:34:39","modified_gmt":"2025-05-03T12:34:39","slug":"cve-2025-4238-pcman-ftp-server-mget-command-buffer-overflow","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=2758","title":{"rendered":"CVE-2025-4238 PCMan FTP Server MGET Command buffer overflow"},"content":{"rendered":"
\n

Vulnerability Details<\/h2>\n
\n

Basic Information<\/h3>\n\n\n\n\n\n\n
Title<\/th>\nCVE-2025-4238 PCMan FTP Server MGET Command buffer overflow<\/td>\n<\/tr>\n
Type<\/th>\ncvelist<\/td>\n<\/tr>\n
Published<\/th>\n2025-05-03T16:31:03<\/td>\n<\/tr>\n
Last Seen<\/th>\n2025-05-03T17:11:53<\/td>\n<\/tr>\n
CVSS Score<\/th>\n7.3 (HIGH)<\/td>\n<\/tr>\n<\/table><\/div>\n
\n

CVSS v3 Details<\/h3>\n\n\n\n\n\n\n\n\n\n
Attack Vector<\/th>\nNETWORK<\/td>\n<\/tr>\n
Attack Complexity<\/th>\nLOW<\/td>\n<\/tr>\n
Privileges Required<\/th>\nNONE<\/td>\n<\/tr>\n
User Interaction<\/th>\nNONE<\/td>\n<\/tr>\n
Scope<\/th>\nUNCHANGED<\/td>\n<\/tr>\n
Confidentiality Impact<\/th>\nLOW<\/td>\n<\/tr>\n
Integrity Impact<\/th>\nLOW<\/td>\n<\/tr>\n
Availability Impact<\/th>\nLOW<\/td>\n<\/tr>\n<\/table><\/div>\n
\n

CVE Information<\/h3>\n\n\n\n\n
CVE IDs<\/th>\nCVE-2025-4238<\/td>\n<\/tr>\n
CWE<\/th>\nCWE-120, CWE-119<\/td>\n<\/tr>\n
Bulletin Family<\/th>\ncve<\/td>\n<\/tr>\n<\/table><\/div>\n
\n

Description<\/h3>\n
\n A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as critical. This affects an unknown part of the component MGET Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n <\/div>\n<\/p><\/div>\n
\n

Impact Assessment<\/h3>\n\n\n\n
Base Score<\/th>\n7.3<\/td>\n<\/tr>\n
Severity<\/th>\nHIGH<\/td>\n<\/tr>\n<\/table><\/div>\n
\n

View full CVE details<\/a><\/p>\n<\/p><\/div>\n<\/div>\n