CVE-2019-25361

HIGH

Ayukov NFTP client 1.71 - 'SYST' Buffer Overflow

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2019-25361 has a selected CVSS score of 8.6 (high); EIP currently links 1 catalogued exploit.

Description

Ayukov NFTP client 1.71 contains a buffer overflow vulnerability in the SYST command handling that allows remote attackers to execute arbitrary code. Attackers can send a specially crafted SYST command with oversized payload to trigger a buffer overflow and execute a bind shell on port 5150.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 19, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Ayukov NFTP client

Browse Ayukov / Ayukov NFTP client
CVE List1.71affected

Proofs of concept

1

Catalogued exploits

ExploitDBAyukov NFTP client 1.71 - 'SYST' Buffer OverflowExploitDB exploitby SYANiDENot analyzed1 file
ExploitDB
PoC details

References

4