CVE-2019-25587
Denial of Service via Buffer Overflow in BulletProof FTP Server
Publication date: 2026-03-22
Last updated on: 2026-03-25
Assigner: VulnCheck
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| bpftpserver | bulletproof_ftp_server | 2019.0.0.50 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-1282 | Immutable data, such as a first-stage bootloader, device identifiers, and "write-once" configuration settings are stored in writable memory that can be re-programmed or updated in the field. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
[{'type': 'paragraph', 'content': 'CVE-2019-25587 is a denial of service (DoS) vulnerability in BulletProof FTP Server version 2019.0.0.50. It occurs due to improper input validation in the Storage-Path configuration parameter. A local attacker can enable the "Override Storage-Path" setting and input an excessively long string (500 bytes or more), which causes the application to crash when saving the configuration.'}, {'type': 'paragraph', 'content': 'This vulnerability exploits the fact that the server does not properly handle very long strings in the storage path setting, leading to a crash and disruption of service.'}] [1, 2]
How can this vulnerability impact me? :
This vulnerability can impact you by causing a denial of service condition on the BulletProof FTP Server. An attacker with local access can crash the FTP server application by supplying a long string in the storage path configuration, making the server unavailable to legitimate users.
The impact is primarily on availability, as the server stops functioning properly until it is restarted or the configuration is corrected.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
[{'type': 'paragraph', 'content': 'This vulnerability can be detected by attempting to reproduce the denial of service condition on the BulletProof FTP Server 2019.0.0.50 by using a proof-of-concept exploit.'}, {'type': 'list_item', 'content': "Run the Python script `BulletProof_Storage_Server_2019.0.0.50.py` to generate a payload file named `bullet_storage.txt` containing 500 'A' characters."}, {'type': 'list_item', 'content': 'Copy the contents of `bullet_storage.txt` to the clipboard.'}, {'type': 'list_item', 'content': "Open BulletProof FTP Server, navigate to Settings > Advanced, enable the 'Override Storage-Path' setting, and paste the clipboard content."}, {'type': 'list_item', 'content': 'Save the configuration; if the server crashes, the vulnerability is present.'}] [1]
What immediate steps should I take to mitigate this vulnerability?
I don't know