PT-2026-43219 · Undefined · Undefined

Published 2026-05-25 · Updated 2026-05-25 · CVE-2018-25366

NVD

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CuteFTP 5.0 XP contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by injecting malicious payload into the Site Manager label field. Attackers can craft a payload exceeding 520 bytes that overwrites the return address and executes shellcode when a shortcut is created and launched.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2018-25366

Affected Products

Undefined

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-25366 · Security Note
• http://installer.globalscape.com/pub/cuteftp/archive/english/cuteftp50.exe · Note
• https://vulncheck.com/advisories/cuteftp-xp-buffer-overflow-via-site-manager-label-field · Note
• https://exploit-db.com/exploits/45259 · Note