CVE-2019-25587

Name of the Vulnerable Software and Affected Versions BulletProof FTP Server version 2019.0.0.50

Description The software contains a denial of service issue in the Storage-Path configuration parameter. Local attackers can crash the application by providing an excessively long string value. Attackers can enable the Override Storage-Path setting and paste a buffer of 500 bytes or more to trigger an application crash when saving the configuration.

Recommendations Avoid providing excessively long string values (500 bytes or more) to the Storage-Path configuration parameter.