CVE-2019-25611: Skyqinsc Miniftp

High severity, CVSS 8.4. EPSS: 0.2% chance of exploitation in the next 30 days.

MiniFtp contains a buffer overflow vulnerability in the parseconf_load_setting function that allows local attackers to execute arbitrary code by supplying oversized configuration values. Attackers can craft a miniftpd.conf file with values exceeding 128 bytes to overflow stack buffers and overwrite the return address, enabling code execution with root privileges.

Affected products

• Skyqinsc Miniftp: any version

Published 2026-03-22. Last modified 2026-06-17.