Bpftpserver Bulletproof Ftp Server vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Bpftpserver Bulletproof Ftp Server: 3 record(s), with affected versions and fixes.cpe:2.3:a:bpftpserver:bulletproof_ftp_server
CVE-2018-25229
High · 7.1
CWE-1282 Mar 30, 2026
BulletProof FTP Server 2019.0.0.50 Denial of Service via SMTP
BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the SMTP configuration interface that allows local attackers to crash the application by supplying an oversized string. Attackers can input a buffer of 257 'A' characters in the SMTP Server field and trigger a crash by clicking the Test button.
CVE-2019-25588
Medium · 5.5
CWE-1282 Mar 21, 2026
BulletProof FTP Server 2019.0.0.50 Denial of Service via DNS Address
BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the DNS Address field that allows local attackers to crash the application by supplying an excessively long string. Attackers can enable the DNS Address option in the Firewall settings and paste a buffer of 700 bytes to trigger a crash when the Test function is invoked.
CVE-2019-25587
Medium · 5.5
CWE-1282 Mar 21, 2026
BulletProof FTP Server 2019.0.0.50 Storage-Path Denial of Service
BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the Storage-Path configuration parameter that allows local attackers to crash the application by supplying an excessively long string value. Attackers can enable the Override Storage-Path setting and paste a buffer of 500 bytes or more to trigger an application crash when saving the configuration.