CVE-2024-0731
published 2024-01-19CVE-2024-0731: A vulnerability has been found in PCMan FTP Server 2.0.7 and classified as problematic. This vulnerability affects unknown code of the component PUT Command…
PriorityP340high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
1.11%
65.4th percentile
A vulnerability has been found in PCMan FTP Server 2.0.7 and classified as problematic. This vulnerability affects unknown code of the component PUT Command Handler. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-251554 is the identifier assigned to this vulnerability.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| pcman | ftp_server | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
PCMan FTP Server 2.0.7 PUT Command denial of service
vuldb·2026-08-21·CVSS 7.5
CVE-2024-0731 [HIGH] PCMan FTP Server 2.0.7 PUT Command denial of service
A vulnerability, which was classified as problematic, has been found in PCMan FTP Server 2.0.7. Impacted is an unknown function of the component PUT Command Handler. Performing a manipulation results in denial of service.
This vulnerability was named CVE-2024-0731. The attack may be initiated remotely. In addition, an exploit is available.
It is suggested to use restrictive firewalling.
GHSA
GHSA-9hx3-jmww-j882: A vulnerability has been found in PCMan FTP Server 2
ghsa_unreviewed·2024-01-19
CVE-2024-0731 [MEDIUM] CWE-120 GHSA-9hx3-jmww-j882: A vulnerability has been found in PCMan FTP Server 2
A vulnerability has been found in PCMan FTP Server 2.0.7 and classified as problematic. This vulnerability affects unknown code of the component PUT Command Handler. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-251554 is the identifier assigned to this vulnerability.
Suricata
GPL WEB_SERVER apache ?M=D directory list attempt
suricata·2010-09-23
CVE-2001-0731 GPL WEB_SERVER apache ?M=D directory list attempt
GPL WEB_SERVER apache ?M=D directory list attempt
Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"GPL WEB_SERVER apache ?M=D directory list attempt"; flow:established,to_server; http.uri; content:"/?M=D"; reference:bugtraq,3009; reference:cve,2001-0731; classtype:web-application-activity; sid:2101519; rev:13; metadata:created_at 2010_09_23, cve CVE_2001_0731, signature_severity Unknown, updated_at 2024_03_08;)
No public exploits indexed.
No writeups or analysis indexed.
2024-01-19
Published