CVE-2018-25226

Katalog CVE

CVSS 5.5 · Medium EPSS 0,22%

Kerentanan Out-of-bounds Write pada ftpshell server. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

FTPShell Server 6.83 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the account name field. Attackers can trigger a denial of service by pasting a 417-byte payload into the 'Account name to ban' parameter within the Manage FTP Accounts interface.

Rincian

Terbit di NVD

30 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,22% peluang dieksploitasi; lebih tinggi dari 11,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.vulncheck.com/advisories/ftpshell-server-denial-of-service-via-account-name advisory pihak ketiga
• https://www.exploit-db.com/exploits/46430 exploit · vdb entry
• http://www.ftpshell.com/downloadserver.htm broken link
• http://www.ftpshell.com/index.htm product