CVE-2019-25619CWE-787

FTP Shell Server 6.83 Buffer Overflow via Account Name

High · published March 22, 2026

CVSS v4.0
8.6
EPSS
0%
Percentile
11.6
In the wild
Unconfirmed
What it is

FTP Shell Server 6.83 contains a buffer overflow vulnerability in the 'Account name to ban' field that allows local attackers to execute arbitrary code by supplying a crafted string. Attackers can inject shellcode through the account name parameter in the Manage FTP Accounts dialog to overwrite the return address and execute calc.exe or other commands.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00218 · 11.6th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-03-22T13:38Z
EPSS history
Timeline
  • 22 MAR 13:38Z
    FTP Shell Server 6.83 Buffer Overflow via Account Name
    cvelistv5