PT-2026-27007 · Ftpshell · Ftpshell Server

Publicado 2026-03-22 · Atualizado 2026-03-22 · CVE-2019-25619

Positive Technologies (AI Summary)

CVSS v3.1

8.4

Alta

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FTP Shell Server version 6.83

Description FTP Shell Server 6.83 contains a buffer overflow in the 'Account name to ban' field. Local attackers can execute arbitrary code by providing a crafted string. Attackers can inject shellcode through the account name parameter in the Manage FTP Accounts dialog to overwrite the return address and execute commands such as calc.exe.

Recommendations Update to a newer version of FTP Shell Server that addresses this issue.

Exploit

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2019-25619

Produtos afetados

Ftpshell Server

Referências · 4

• 🔥 https://exploit-db.com/exploits/46685 · Exploit
• http://ftpshell.com/index.htm · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-25619 · Nota de Segurança
• https://vulncheck.com/advisories/ftp-shell-server-buffer-overflow-via-account-name · Nota