CVE-2019-25619 - FTP Shell Server 6.83 Buffer Overflow via Account Name

Back Back to CVE browser

HIGH

FTP Shell Server 6.83 Buffer Overflow via Account Name

Published Mar 22, 2026

8.6

HIGH

CVSS 4.0

EPSS 0.21%

Description

FTP Shell Server 6.83 contains a buffer overflow vulnerability in the 'Account name to ban' field that allows local attackers to execute arbitrary code by supplying a crafted string. Attackers can inject shellcode through the account name parameter in the Manage FTP Accounts dialog to overwrite the return address and execute calc.exe or other commands.

Affected products

Vendor Ftpshell Product FTP Shell Server Default
n/a
- Version
  6.83
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Ftpshell

FTP Shell Server

n/a

Version	Status	Constraints
6.83	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (4)

http://www.ftpshell.com/index.htm
product
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-19979
Advisory
https://www.exploit-db.com/exploits/46685
exploitThird Party AdvisoryVDB Entry
https://www.vulncheck.com/advisories/ftp-shell-server-buffer-overflow-via-account-name
third-party-advisoryThird Party Advisory

Link	Providers	Tags
http://www.ftpshell.com/index.htm		product
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-19979		Advisory
https://www.exploit-db.com/exploits/46685		exploitThird Party AdvisoryVDB Entry
https://www.vulncheck.com/advisories/ftp-shell-server-buffer-overflow-via-account-name		third-party-advisoryThird Party Advisory