CVE-2024-0732CWE-120CWE-404

CVE-2024-0732

Medium · published January 20, 2024

CVSS v3.1
5.3
EPSS
1%
Percentile
65.7
In the wild
Unconfirmed
What it is

A vulnerability was found in PCMan FTP Server 2.0.7 and classified as problematic. This issue affects some unknown processing of the component STOR Command Handler. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-251555.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01112 · 65.7th percentile
Weaknesses
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'); CWE-404 · Improper Resource Shutdown or Release
Published
2024-01-20T01:15Z
Affected products (1)
ProductVersionsFixed in
pcman/ftp_serverall versions—
References (6)
https://fitoxs.com/vuldb/02-PCMan%20v2.0.7-exploit.txt · [email protected]https://vuldb.com/?ctiid.251555 · [email protected]https://vuldb.com/?id.251555 · [email protected]https://fitoxs.com/vuldb/02-PCMan%20v2.0.7-exploit.txt · af854a3a-2127-422b-91ae-364da2661108https://vuldb.com/?ctiid.251555 · af854a3a-2127-422b-91ae-364da2661108https://vuldb.com/?id.251555 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 19 JAN 20:00Z
    PCMan FTP Server STOR Command denial of service
    cvelistv5