CVE-2018-25254 in NICO-FTP
摘要 (英语)
NICO-FTP 3.0.1.19 contains a structured exception handler buffer overflow vulnerability that allows remote attackers to execute arbitrary code by sending crafted FTP commands. Attackers can connect to the FTP service and send oversized data in response handlers to overwrite SEH pointers and redirect execution to injected shellcode.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
负责
VulnCheck
预定
2026-04-04
披露
2026-04-04
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 355372 | NICO-FTP FTP Service 内存损坏 | 787 | 概念验证 | 未定义 | CVE-2018-25254 |