{"id":"CVE-2025-5051","state":"PUBLISHED","title":"FreeFloat FTP Server BINARY Command buffer overflow","description":"A vulnerability classified as critical has been found in FreeFloat FTP Server 1.0. Affected is an unknown function of the component BINARY Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.","publishedAt":"2025-05-21T20:00:07.185Z","updatedAt":"2025-05-21T20:15:09.587Z","severity":{"score":6.9,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","source":"VulDB"},"assigner":"VulDB","products":["FreeFloat FTP Server"],"affected":[{"vendor":"FreeFloat","product":"FTP Server","versions":[{"version":"1.0","status":"affected"}],"modules":["BINARY Command Handler"]}],"references":["https://vuldb.com/?id.309870","https://vuldb.com/?ctiid.309870","https://vuldb.com/?submit.581283","https://fitoxs.com/exploit/exploit-4c025558ea74cba6eda5d8483c3d65f16de258eef4b3a5fcc50b4278c120e558.txt"],"weaknesses":["CWE-120","CWE-119"],"ingestedAt":"2026-10-29T20:09:39.787Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/5xxx/CVE-2025-5051.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-5051","state":"PUBLISHED","datePublished":"2025-05-21T20:00:07.185Z","dateUpdated":"2025-05-21T20:15:09.587Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2025-05-21T13:28:38.399Z"},"containers":{"cna":{"title":"FreeFloat FTP Server BINARY Command buffer overflow","descriptions":[{"lang":"en","value":"A vulnerability classified as critical has been found in FreeFloat FTP Server 1.0. Affected is an unknown function of the component BINARY Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used."},{"lang":"de","value":"Es wurde eine kritische Schwachstelle in FreeFloat FTP Server 1.0 entdeckt. Es betrifft eine unbekannte Funktion der Komponente BINARY Command Handler. Dank der Manipulation mit unbekannten Daten kann eine buffer overflow-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung."}],"affected":[{"vendor":"FreeFloat","product":"FTP Server","versions":[{"version":"1.0","status":"affected"}],"modules":["BINARY Command Handler"]}],"references":[{"url":"https://vuldb.com/?id.309870","name":"VDB-309870 | FreeFloat FTP Server BINARY Command buffer overflow","tags":["vdb-entry"]},{"url":"https://vuldb.com/?ctiid.309870","name":"VDB-309870 | CTI Indicators (IOB, IOC)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/?submit.581283","name":"Submit #581283 | FreeFloat FTP Server 1.0.0 Buffer Overflow","tags":["third-party-advisory"]},{"url":"https://fitoxs.com/exploit/exploit-4c025558ea74cba6eda5d8483c3d65f16de258eef4b3a5fcc50b4278c120e558.txt","tags":["broken-link","exploit"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":7.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","baseSeverity":"HIGH"}},{"cvssV3_0":{"version":"3.0","baseScore":7.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","baseSeverity":"HIGH"}},{"cvssV2_0":{"version":"2.0","baseScore":7.5,"vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-120","type":"CWE","lang":"en","description":"Buffer Overflow"}]},{"descriptions":[{"cweId":"CWE-119","type":"CWE","lang":"en","description":"Memory Corruption"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2025-05-21T20:00:07.185Z"},"timeline":[{"time":"2025-05-21T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2025-05-21T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2025-05-21T15:33:52.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"Fernando Mengali (VulDB User)","type":"reporter"}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-05-21T20:14:52.038198Z","id":"CVE-2025-5051","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-05-21T20:15:09.587Z"}}]}}}