Buffer overflow in Skyqinsc Miniftp

CVE-2019-25611

MiniFtp contains a buffer overflow vulnerability in the parseconf_load_setting function that allows local attackers to execute arbitrary code by supplying oversized configuration values. Attackers can craft a miniftpd.conf file with values exceeding 128 bytes to overflow stack buffers and overwrite the return address, enabling code execution with root privileges.

Vulnerability class: Buffer Overflow

EPSS: 0.002 (4.6th percentile) — read the EPSS interpretation.