CVE-2019-25681

Name of the Vulnerable Software and Affected Versions Xlight FTP Server version 3.9.1

Description A structured exception handler (SEH) overwrite issue exists, where SEH is a mechanism used by Windows to handle hardware and software exceptions. Local attackers can crash the application and overwrite SEH pointers by providing a crafted buffer string. By injecting a 428-byte payload through the program execution field in the virtual server configuration, a buffer overflow is triggered that corrupts the SEH chain, potentially allowing arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.