CVE-2019-25619 HIGH

CVE-2019-25619: FTP Shell Server 6.83 Buffer Overflow via Account Name

Vendor Ftpshell
Product FTP Shell Server
Weakness CWE-787
Published March 22, 2026
Last update March 23, 2026

CVSS base score

8.6/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

FTP Shell Server 6.83 contains a buffer overflow vulnerability in the 'Account name to ban' field that allows local attackers to execute arbitrary code by supplying a crafted string. Attackers can inject shellcode through the account name parameter in the Manage FTP Accounts dialog to overwrite the return address and execute calc.exe or other commands.

Key dates

02Disclosure timeline

March 22, 2026 CVE published
March 23, 2026 Record updated