Approved changes feed: RSS · Atom

cpe:2.3:a:bpftpserver:bulletproof_ftp_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBpftpserver (56671b1a-0045-5ef7-9e08-5e31e2392cac)
ProductBulletproof Ftp Server (a98941fc-2e47-5341-891c-1a67e6c40506)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-25588 vulnerable 2026-06-08 05:13:42.611147 BulletProof FTP Server 2019.0.0.50 Denial of Service via DNS Address
MEDIUM (6.2)
BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the DNS Address field that allows local attackers to crash the application by supplying an excessively long string. Attackers can enable the DNS Address option in the Firewall settings and paste a buffer of 700 bytes to trigger a crash when the Test function is invoked.
Published: 2026-03-22T00:11:09.625Z
Updated: 2026-10-01T15:19:19.736Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-25587 vulnerable 2026-06-08 05:13:42.610027 BulletProof FTP Server 2019.0.0.50 Storage-Path Denial of Service
MEDIUM (6.2)
BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the Storage-Path configuration parameter that allows local attackers to crash the application by supplying an excessively long string value. Attackers can enable the Override Storage-Path setting and paste a buffer of 500 bytes or more to trigger an application crash when saving the configuration.
Published: 2026-03-22T00:11:08.855Z
Updated: 2026-10-01T15:19:19.089Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-25229 vulnerable 2026-06-08 05:11:29.638435 BulletProof FTP Server 2019.0.0.50 Denial of Service via SMTP
MEDIUM (5.5)
BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the SMTP configuration interface that allows local attackers to crash the application by supplying an oversized string. Attackers can input a buffer of 257 'A' characters in the SMTP Server field and trigger a crash by clicking the Test button.
Published: 2026-03-30T11:02:21.772Z
Updated: 2026-10-01T15:19:09.899Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.