CVE-2019-25588
Last modified
CVE-2019-25588 is a medium-severity vulnerability rated 5.5/10 on the CVSS scale. BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the DNS Address field that allows local attackers to crash the application by supplying an excessively long string. Attackers can enable the DNS Address option in the Firewall settings and paste a buffer of 700 bytes to trigger a crash when the Test function is invoked.. EPSS estimates a 0.17% chance of exploitation in the next 30 days.
Description
BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the DNS Address field that allows local attackers to crash the application by supplying an excessively long string. Attackers can enable the DNS Address option in the Firewall settings and paste a buffer of 700 bytes to trigger a crash when the Test function is invoked.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Bpftpserver | Bulletproof Ftp Server | 2019.0.0.50 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2019-25588?
How severe is CVE-2019-25588?
How do I fix CVE-2019-25588?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-25582i-doit CMDB 1.12 contains an arbitrary file download vulnera…7.1
- CVE-2019-25583RarmaRadio 2.72.3 contains a denial of service vulnerability…5.5
- CVE-2019-25584RarmaRadio 2.72.3 contains a buffer overflow vulnerability i…5.5
- CVE-2019-25585Deluge 1.3.15 contains a denial of service vulnerability tha…5.5
- CVE-2019-25586Deluge 1.3.15 contains a denial of service vulnerability tha…5.5
- CVE-2019-25587BulletProof FTP Server 2019.0.0.50 contains a denial of serv…5.5
- CVE-2019-25589ZOC Terminal 7.23.4 contains a buffer overflow vulnerability…5.5
- CVE-2019-25590Axessh 4.2 contains a denial of service vulnerability in the…6.9
- CVE-2019-25591DNSS Domain Name Search Software 2.1.8 contains a buffer ove…6.9
- CVE-2019-25592PHPRunner 10.1 contains a denial of service vulnerability th…6.9
- CVE-2019-25593jetCast Server 2.0 contains a denial of service vulnerabilit…6.8
- CVE-2019-25594ASPRunner.NET 10.1 contains a denial of service vulnerabilit…6.9
Are you affected by CVE-2019-25588?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST