mk017-hk/cve-2025-5548
Security research and technical analysis of CVE-2025-5548, a buffer overflow vulnerability affecting FreeFloat FTP Server 1.0. This repository documents vulnerability behavior, attack surface, controlled proof of concept testing, and defensive insights within a structured research environment for cybersecurity learning and analysis.
Security research and technical analysis of CVE-2025-5548, a buffer overflow vulnerability affecting FreeFloat FTP Server 1.0.
This repository documents vulnerability behaviour, attack surface analysis, controlled proof of concept testing, and defensive observations within a safe lab environment.
CVE-2025-5548 is a buffer overflow vulnerability in FreeFloat FTP Server 1.0 triggered through the NOOP command.
Improper bounds checking on user supplied input allows an attacker to send an oversized payload which can corrupt process memory within the FTP service.
Because the service is network accessible and does not require authentication, exploitation may be performed remotely.
| Field | Value |
|---|
| Vulnerability | Buffer Overflow |
| Protocol | FTP |
| Affected Software | FreeFloat FTP Server 1.0 |
| Attack Vector | Remote |
| Authentication Required | No |
| User Interaction | None |
| Trigger | Oversized NOOP command |
| CWE | CWE-120 Classic Buffer Overflow |
Possible outcomes include:
CVE-2025-5548/
├── poc/
│ └── crash_poc.py
├── docs/
│ ├── analysis.md
│ ├── notes.md
│ └── screenshots/
├── pcaps/
│ └── noop_overflow_capture.pcap
├── README.md
└── LICENSE