CVE-2019-25619

Katalog CVE

CVSS 7.8 · High EPSS 0,21%

Kerentanan Out-of-bounds Write pada ftpshell server. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

FTP Shell Server 6.83 contains a buffer overflow vulnerability in the 'Account name to ban' field that allows local attackers to execute arbitrary code by supplying a crafted string. Attackers can inject shellcode through the account name parameter in the Manage FTP Accounts dialog to overwrite the return address and execute calc.exe or other commands.

Rincian

Terbit di NVD

22 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,21% peluang dieksploitasi; lebih tinggi dari 10,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.exploit-db.com/exploits/46685 exploit · advisory pihak ketiga · vdb entry
• https://www.vulncheck.com/advisories/ftp-shell-server-buffer-overflow-via-account-name advisory pihak ketiga
• http://www.ftpshell.com/index.htm product