CVE-2019-25611 - Vulnerability Analysis

Overview

MiniFtp contains a buffer overflow caused by oversized configuration values in parseconf_load_setting, letting local attackers execute arbitrary code with root privileges, exploit requires crafted miniftpd.conf file.

Severity & Score

Impact

Local attackers can execute arbitrary code with root privileges, leading to full system compromise.

Mitigation

Update to the latest version with buffer overflow fix.

References

• https://www.exploit-db.com/exploits/46807
• https://www.vulncheck.com/advisories/miniftp-parseconf-load-setting-buffer-overflow-via-configuration
• https://github.com/skyqinsc/MiniFtp

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner