Description
MiniFtp contains a buffer overflow vulnerability in the parseconf_load_setting function that allows local attackers to execute arbitrary code by supplying oversized configuration values. Attackers can craft a miniftpd.conf file with values exceeding 128 bytes to overflow stack buffers and overwrite the return address, enabling code execution with root privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| skyqinsc | MiniFtp | — | — |
References
- ExploitDB-46807 exploit
- Official Product Homepage product
- VulnCheck Advisory: MiniFtp parseconf_load_setting Buffer Overflow via Configuration third-party-advisory