Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2018-25226

FTPShell Server 6.83 Denial of Service via Account Name

Description

FTPShell Server 6.83 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the account name field. Attackers can trigger a denial of service by pasting a 417-byte payload into the 'Account name to ban' parameter within the Manage FTP Accounts interface.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ftpshell FTPShell Server

  • 6.83affected

References