CVE-2019-25588

MEDIUM6.9

BulletProof FTP Server 2019.0.0.50 Denial of Service via DNS Address

Published Mar 22, 2026

Modified 2 months ago

Details

BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the DNS Address field that allows local attackers to crash the application by supplying an excessively long string. Attackers can enable the DNS Address option in the Firewall settings and paste a buffer of 700 bytes to trigger a crash when the Test function is invoked.

References

WEB

http://bpftpserver.com/

WEB

http://bpftpserver.com/products/bpftpserver/windows/download

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2019-25588

DETECTION

https://www.exploit-db.com/exploits/46875

ADVISORY

https://www.vulncheck.com/advisories/bulletproof-ftp-server-denial-of-service-via-dns-address

CVSS Analysis