Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2019-25361

Ayukov NFTP client 1.71 - 'SYST' Buffer Overflow

Description

Ayukov NFTP client 1.71 contains a buffer overflow vulnerability in the SYST command handling that allows remote attackers to execute arbitrary code. Attackers can send a specially crafted SYST command with oversized payload to trigger a buffer overflow and execute a bind shell on port 5150.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ayukov Ayukov NFTP client

  • 1.71affected

References