PT-2026-27007 · Ftpshell · Ftpshell Server

Published 2026-03-22 · Updated 2026-03-22 · CVE-2019-25619

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FTP Shell Server version 6.83

Description FTP Shell Server 6.83 contains a buffer overflow in the 'Account name to ban' field. Local attackers can execute arbitrary code by providing a crafted string. Attackers can inject shellcode through the account name parameter in the Manage FTP Accounts dialog to overwrite the return address and execute commands such as calc.exe.

Recommendations Update to a newer version of FTP Shell Server that addresses this issue.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2019-25619

Affected Products

Ftpshell Server

References · 4

• 🔥 https://exploit-db.com/exploits/46685 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25619 · Security Note
• http://ftpshell.com/index.htm · Note
• https://vulncheck.com/advisories/ftp-shell-server-buffer-overflow-via-account-name · Note