CVE-2019-25619
Buffer Overflow in FTP Shell Server 6.83 Enables Code Execution
Publication date: 2026-03-22
Last updated on: 2026-04-03
Assigner: VulnCheck
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| ftpshell | ftpshell_server | 6.83 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-787 | The product writes data past the end, or before the beginning, of the intended buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
[{'type': 'paragraph', 'content': "CVE-2019-25619 is a local buffer overflow vulnerability in FTP Shell Server version 6.83, specifically in the 'Account name to ban' field within the Manage FTP Accounts dialog."}, {'type': 'paragraph', 'content': 'An attacker with local access can supply a specially crafted string as the account name, which overflows a buffer and overwrites the return address on the stack. This allows the attacker to execute arbitrary code on the affected system.'}, {'type': 'paragraph', 'content': 'The exploit involves injecting shellcode that can run commands such as launching the calculator application (calc.exe) as a proof of concept.'}] [1, 2]
How can this vulnerability impact me? :
This vulnerability allows local attackers to execute arbitrary code with the privileges of the FTP Shell Server process.
Successful exploitation can lead to full compromise of the affected system, including unauthorized command execution, potential data manipulation, and disruption of service.
The CVSS v4 base score of 8.6 reflects high impact on confidentiality, integrity, and availability, meaning attackers can read, modify, or delete data and disrupt system operations.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
[{'type': 'paragraph', 'content': 'This vulnerability is a local buffer overflow in the FTP Shell Server 6.83 application, specifically triggered by inputting a crafted string into the "Account name to ban" field in the Manage FTP Accounts dialog. Detection involves verifying if the FTP Shell Server version 6.83 or earlier is in use and checking for suspicious or unusually long account names in the "Account name to ban" field.'}, {'type': 'paragraph', 'content': 'Since the exploit requires local access to the application interface, network-based detection commands are not applicable. Instead, detection can be performed by inspecting the FTP Shell Server application and its configuration.'}, {'type': 'paragraph', 'content': 'No specific commands are provided in the resources for detecting this vulnerability on a system or network.'}] [1, 2]
What immediate steps should I take to mitigate this vulnerability?
[{'type': 'paragraph', 'content': 'Immediate mitigation steps include restricting local access to the FTP Shell Server application to trusted users only, as the exploit requires local interaction with the "Account name to ban" field.'}, {'type': 'paragraph', 'content': 'Avoid entering untrusted or suspicious account names in the "Account name to ban" field to prevent triggering the buffer overflow.'}, {'type': 'paragraph', 'content': 'If possible, upgrade or patch the FTP Shell Server software to a version that addresses this vulnerability, or apply any vendor-provided security updates.'}, {'type': 'paragraph', 'content': 'Monitor and audit local user activities on the system to detect any attempts to exploit this vulnerability.'}] [1, 2]