<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: bulletproof ftp server</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2018-25229: BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the SMTP configuration interf</title><link>https://patchthecve.com/cve/CVE-2018-25229.html</link><guid>https://patchthecve.com/cve/CVE-2018-25229.html</guid><pubDate>Wed, 17 Jun 2026 01:55:01 +0000</pubDate><description>MEDIUM 5.5: BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the SMTP configuration interface that allows local attackers to crash the application by supplying an oversized string. Attackers can input a buffer of 257 &#x27;A&#x27; characters in the SMTP Server field and trigger a crash by </description></item><item><title>CVE-2019-25588: BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the DNS Address field that al</title><link>https://patchthecve.com/cve/CVE-2019-25588.html</link><guid>https://patchthecve.com/cve/CVE-2019-25588.html</guid><pubDate>Wed, 17 Jun 2026 02:32:44 +0000</pubDate><description>MEDIUM 6.2: BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the DNS Address field that allows local attackers to crash the application by supplying an excessively long string. Attackers can enable the DNS Address option in the Firewall settings and paste a buffer of 700 bytes to</description></item><item><title>CVE-2019-25587: BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the Storage-Path configuratio</title><link>https://patchthecve.com/cve/CVE-2019-25587.html</link><guid>https://patchthecve.com/cve/CVE-2019-25587.html</guid><pubDate>Wed, 17 Jun 2026 02:32:44 +0000</pubDate><description>MEDIUM 6.2: BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the Storage-Path configuration parameter that allows local attackers to crash the application by supplying an excessively long string value. Attackers can enable the Override Storage-Path setting and paste a buffer of 5</description></item></channel></rss>