VULNERABILITY INTELLIGENCE
CVE-2019-25611
CVSS score8.4 HIGH
EPSS probability0.15%
CISA KEVNot currently listed
Published2026-03-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
MiniFtp contains a buffer overflow vulnerability in the parseconf_load_setting function that allows local attackers to execute arbitrary code by supplying oversized configuration values. Attackers can craft a miniftpd.conf file with values exceeding 128 bytes to overflow stack buffers and overwrite the return address, enabling code execution with root privileges.
Weakness classification
- disclosure@vulncheck.com: CWE-787