Search/CVE-2019-25588
● CVE — Medium

CVE-2019-25588

VendorbpftpserverProductbulletproof ftp serverDiscoveredMar 22, 2026UpdatedMar 25, 2026

BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the DNS Address field that allows local attackers to crash the application by supplying an excessively long string. Attackers can enable the DNS Address option in the Firewall settings and paste a buffer of 700 bytes to trigger a crash when the Test function is invoked.

View graph Watch Export
CVSS v3.1
6.2 MEDIUM
EPSS
0.17%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 22, 2026
● 0.00pp
0.17% → 0.17% over 2 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityNONE
IntegrityNONE
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Connections
2 relationships
Timeline
disclosure → media coverage
Mar 22, 2026
Disclosure — published as a CVE record. · last revised by NVD Mar 25, 2026