{"id":"CVE-2019-25588","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-25588","generatedAt":"2026-10-27T21:19:13.932Z","title":"BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the DNS Address field that allows local attackers to crash the application by supplying an excessively long string.","description":"BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the DNS Address field that allows local attackers to crash the application by supplying an excessively long string. Attackers can enable the DNS Address option in the Firewall settings and paste a buffer of 700 bytes to trigger a crash when the Test function is invoked.","published":"2026-03-22T01:16:57.000Z","lastModified":"2026-06-17T02:32:45.000Z","status":"Analyzed","sourceIdentifier":"disclosure@vulncheck.com","cvss":{"version":"4.0","score":6.9,"severity":"MEDIUM","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-1282"],"affected":["bpftpserver/bulletproof ftp server"],"epss":{"score":0.00174,"percentile":0.06824,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.17%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://bpftpserver.com/","tags":["Product"],"source":"disclosure@vulncheck.com"},{"url":"http://bpftpserver.com/products/bpftpserver/windows/download","tags":["Product"],"source":"disclosure@vulncheck.com"},{"url":"https://www.exploit-db.com/exploits/46875","tags":["Exploit","VDB Entry"],"source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/bulletproof-ftp-server-denial-of-service-via-dns-address","tags":["Third Party Advisory"],"source":"disclosure@vulncheck.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-25588","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}