CVE-2025-11947
MediumCVSS 4.5Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
A weakness was identified in bftpd up to 6.2 in the expand_groups function of options.c (configuration file handler). Manipulation can lead to a heap-based buffer overflow; the attack requires local access, is highly complex, and a public exploit exists.
Risk Assessment
Local code execution or service disruption is possible for someone with system access. The vendor did not respond, so a fix may not be available.
Recommendation
Restrict local access to systems running bftpd and monitor configuration files. Consider migrating to an alternative FTP server or applying a custom patch since the vendor did not respond.
Other vulnerabilities in bftpd
Original NVD description (English source)
A weakness has been identified in bftpd up to 6.2. Impacted is the function expand_groups of the file options.c of the component Configuration File Handler. Executing a manipulation can lead to heap-based buffer overflow. It is possible to launch the attack on the local host. Attacks of this nature are highly complex. The exploitability is considered difficult. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS