CVE-2019-25611 - MiniFtp parseconf_load_setting Buffer Overflow via Configuration

Back Back to CVE browser

HIGH

MiniFtp parseconf_load_setting Buffer Overflow via Configuration

Published Mar 22, 2026

8.6

HIGH

CVSS 4.0

EPSS 0.15%

Description

MiniFtp contains a buffer overflow vulnerability in the parseconf_load_setting function that allows local attackers to execute arbitrary code by supplying oversized configuration values. Attackers can craft a miniftpd.conf file with values exceeding 128 bytes to overflow stack buffers and overwrite the return address, enabling code execution with root privileges.

Affected products

Vendor Skyqinsc Product MiniFtp Default
n/a

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Skyqinsc

MiniFtp

n/a

Version	Status	Constraints

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (3)

https://github.com/skyqinsc/MiniFtp
product
https://www.exploit-db.com/exploits/46807
exploit
https://www.vulncheck.com/advisories/miniftp-parseconf-load-setting-buffer-overflow-via-configuration
third-party-advisory

Link	Providers	Tags
https://github.com/skyqinsc/MiniFtp		product
https://www.exploit-db.com/exploits/46807		exploit
https://www.vulncheck.com/advisories/miniftp-parseconf-load-setting-buffer-overflow-via-configuration		third-party-advisory