CVE-2019-25361

Summary

Ayukov NFTP client 1.71 contains a buffer overflow vulnerability in the SYST command handling that allows remote attackers to execute arbitrary code. Attackers can send a specially crafted SYST command with oversized payload to trigger a buffer overflow and execute a bind shell on port 5150.

Affected Software

Weaknesses

• CWE-121: Stack-based Buffer Overflow

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: total

References

• https://www.exploit-db.com/exploits/47576
• http://ayukov.com/nftp/
• https://www.vulncheck.com/advisories/ayukov-nftp-client-syst-buffer-overflow

• ←Previous
• Next→