Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2019-25587

BulletProof FTP Server 2019.0.0.50 Storage-Path Denial of Service

Description

BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the Storage-Path configuration parameter that allows local attackers to crash the application by supplying an excessively long string value. Attackers can enable the Override Storage-Path setting and paste a buffer of 500 bytes or more to trigger an application crash when saving the configuration.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bpftpserver BulletProof FTP Server

  • 2019.0.0.50affected

References