CVE-2019-25321 - Vulnerability Analysis

Overview

FTP Navigator 8.03 contains a stack overflow caused by overwriting Structured Exception Handler (SEH) registers via the Custom Command textbox, letting remote attackers execute arbitrary code remotely, exploit requires crafted payload input.

Severity & Score

Impact

Remote attackers can execute arbitrary code, potentially taking full control of the affected system.

Mitigation

Update to the latest version of FTP Navigator.

References

• http://www.internet-soft.com/
• https://www.exploit-db.com/exploits/47794
• https://www.exploit-db.com/exploits/47812
• https://www.vulncheck.com/advisories/ftp-navigator-stack-overflow-seh

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner