CVE-2019-25588
Medium · 6.2CVSS
6.2
EPSS
0.2%
Published
Mar 22, 2026
CISA due date
—
The record
BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the DNS Address field that allows local attackers to crash the application by supplying an excessively long string. Attackers can enable the DNS Address option in the Firewall settings and paste a buffer of 700 bytes to trigger a crash when the Test function is invoked.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2018-25229 BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the SMTP… CWE-1282
- CVE-2019-25590 Axessh 4.2 contains a denial of service vulnerability in the logging configuration that… CWE-1282
- CVE-2019-25587 BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the… CWE-1282
- CVE-2019-25583 RarmaRadio 2.72.3 contains a denial of service vulnerability in the Username field that… CWE-1282
- CVE-2019-25551 Sandboxie 5.30 contains a denial of service vulnerability that allows local attackers to… CWE-1282
- CVE-2019-25358 FileOptimizer 14.00.2524 contains a denial of service vulnerability that allows attackers… CWE-1282