PT-2026-26954 · Unknown · Bulletproof Ftp Server

Victor Mondragón · Published 2026-03-22 · Updated 2026-03-22 · CVE-2019-25588

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions BulletProof FTP Server version 2019.0.0.50

Description The software contains a denial of service issue in the DNS Address field. Local attackers can cause the application to crash by providing an excessively long string. Specifically, attackers can enable the DNS Address option within the Firewall settings and paste a 700-byte buffer, triggering a crash when the Test() function is called.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-1282

Related Identifiers

CVE-2019-25588

Affected Products

Bulletproof Ftp Server

References · 5

• 🔥 https://exploit-db.com/exploits/46875 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25588 · Security Note
• https://vulncheck.com/advisories/bulletproof-ftp-server-denial-of-service-via-dns-address · Note
• http://bpftpserver.com/products/bpftpserver/windows/download · Note
• http://bpftpserver.com · Note