CVE-2019-25587Disclosure(bpftpserver / bulletproof_ftp_server)

LOWCVSS 5.5 · MEDIUM

Signal is active with 4 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the Storage-Path configuration parameter that allows local attackers to crash the application by supplying an excessively long string value. Attackers can enable the Override Storage-Path setting and paste a buffer of 500 bytes or more to trigger an application crash when saving the configuration.

bpftpserver CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://www.exploit-db.com/exploits/46876

Vendor / third-party advisories

https://www.vulncheck.com/advisories/bulletproof-ftp-server-storage-path-denial-of-service

Other references

Weakness type (CWE)

CWE-1282

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

bulletproof_ftp_server

Threat summary

4 mentions across 1 observed day

What's happening

Technical details provided in 3 signals
Disclosure: 2 classified signals
General: 2 classified signals
4 total mentions across 1 day

Affected systems

Vendors

bpftpserver

Products

bulletproof_ftp_server

1 version affected across 1 product

Deep dive

Activity timeline4 mentions / 1d

Signal classification2 categories

Disclosure

250.0%

General

250.0%

Referenced assets4 URLs

By indicator

Full discourse4 posts

CVEarity@CVEarity200d
General
⚡ New CVE Alert: CVE-2019-25587 📊 Severity: 6.2 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2019-25587 #CVE-2019-25587 #CVE #Medium #CyberSecurity #InfoSec https://t.co/cIr4FzWxSi
Post summary
A brief alert announcing CVE-2019-25587 with severity rating and reference link, lacking detailed technical or remediation information.
0000020
111 followersView on X
CVE@CVEnew200d
Disclosure
CVE-2019-25587 BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the Storage-Path configuration parameter that allows local attackers to crash the app… https://www.cve.org/CVERecord?id=CVE-2019-25587
Post summary
A denial‑of‑service flaw in BulletProof FTP Server 2019.0.0.50 that allows local attackers to crash the app is announced, with no PoC, exploit, or patch mentioned.
0000067
56.8K followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash200d
Disclosure
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2019-25587 - BulletProof FTP Server 2019.0.0.50 Storage-Path Denial of Service Intel Report: https://ift.tt/pu8Qjig
Post summary
The alert announces CVE-2019-25587, a storage‑path denial‑of‑service flaw in BulletProof FTP Server, and provides a link to an Intel report.
0000020
291 followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash200d
General
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2019-25587 - BulletProof FTP Server 2019.0.0.50 Storage-Path Denial of Service Intel Report: https://ift.tt/uQVNKUA
Post summary
The post alerts about CVE-2019-25587 causing a Storage‑Path Denial of Service in BulletProof FTP Server 2019.0.0.50, without providing PoC, exploit, or patch details.
0000020
291 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	bpftpserver	bulletproof_ftp_server	2019.0.0.50	-	-

Explore more

Back to dashboard bpftpserver CVEs bulletproof_ftp_server vulnerabilities

What researchers are saying

CVE-2019-25587

CVEarity@CVEarityGeneral

A brief alert announcing CVE-2019-25587 with severity rating and reference link, lacking detailed technical or remediation information.

CVE@CVEnewDisclosure

A denial‑of‑service flaw in BulletProof FTP Server 2019.0.0.50 that allows local attackers to crash the app is announced, with no PoC, exploit, or patch mentioned.

CyberDudeBivash® | Global Cybersecurity Company@cyberbivashDisclosure

The alert announces CVE-2019-25587, a storage‑path denial‑of‑service flaw in BulletProof FTP Server, and provides a link to an Intel report.

CyberDudeBivash® | Global Cybersecurity Company@cyberbivashGeneral

The post alerts about CVE-2019-25587 causing a Storage‑Path Denial of Service in BulletProof FTP Server 2019.0.0.50, without providing PoC, exploit, or patch details.