PT-2026-26954 · Unknown · Bulletproof Ftp Server

Victor Mondragón · Publicado 2026-03-22 · Atualizado 2026-03-22 · CVE-2019-25588

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Média

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions BulletProof FTP Server version 2019.0.0.50

Description The software contains a denial of service issue in the DNS Address field. Local attackers can cause the application to crash by providing an excessively long string. Specifically, attackers can enable the DNS Address option within the Firewall settings and paste a 700-byte buffer, triggering a crash when the Test() function is called.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-1282

Identificadores relacionados

CVE-2019-25588

Produtos afetados

Bulletproof Ftp Server

Referências · 5

• 🔥 https://exploit-db.com/exploits/46875 · Exploit
• https://vulncheck.com/advisories/bulletproof-ftp-server-denial-of-service-via-dns-address · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-25588 · Nota de Segurança
• http://bpftpserver.com/products/bpftpserver/windows/download · Nota
• http://bpftpserver.com · Nota