CVE-2019-25611
HIGH
NVD
CVSS Score
8.4
Severity
HIGH
Published
Mar 22, 2026
Vendor
unknown
Description
MiniFtp contains a buffer overflow vulnerability in the parseconf_load_setting function that allows local attackers to execute arbitrary code by supplying oversized configuration values. Attackers can craft a miniftpd.conf file with values exceeding 128 bytes to overflow stack buffers and overwrite the return address, enabling code execution with root privileges.