CVE-2019-25588

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the DNS Address field that allows local attackers to crash the application by supplying an excessively long string. Attackers can enable the DNS Address option in the Firewall settings and paste a buffer of 700 bytes to trigger a crash when the Test function is invoked.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-1282

Affected software

No affected versions have been published.

Timeline

Published
Mar 22, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2019

CVE-2019-255895.5ZOC Terminal 7.23.4 contains a buffer overflow vulnerability in the Shell field of Program Settings that allows local attackers to crash theCVE-2019-255906.2Axessh 4.2 contains a denial of service vulnerability in the logging configuration that allows local attackers to crash the application by sCVE-2019-255916.2DNSS Domain Name Search Software 2.1.8 contains a buffer overflow vulnerability in the registration code input field that allows local attacCVE-2019-255926.2PHPRunner 10.1 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively lCVE-2019-255935.5jetCast Server 2.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessiveCVE-2019-255946.2ASPRunner.NET 10.1 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessiveCVE-2019-255956.2jetAudio 8.1.7.20702 Basic contains a denial of service vulnerability that allows local attackers to crash the application by supplying an eCVE-2019-255966.2SpotAuditor 5.2.6 contains a denial of service vulnerability in the registration dialog that allows local attackers to crash the applicationCVE-2019-255975.5NSauditor 3.1.2.0 contains a buffer overflow vulnerability in the SNMP Auditor Community field that allows local attackers to crash the applCVE-2019-255986.2HeidiSQL Portable 10.1.0.5464 contains a denial of service vulnerability that allows local attackers to crash the application by supplying aCVE-2019-255996.2Backup Key Recovery 2.2.4 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an exCVE-2019-256006.5UltraVNC Viewer 1.2.2.4 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized
CVE-2019-25588: Medium severity, CVSS 5.5 | Vulnix