CVE-1999-1156
MediumExploitation Probability (EPSS)
Elevated risk66th percentile - higher than 66% of all known CVEs
Summary
BisonWare FTP Server 4.1 and earlier allows remote attackers to cause a denial of service via a malformed PORT command that contains a non-numeric character and a large number of carriage returns.
Risk Assessment
Attackers can exploit this vulnerability to disrupt access to the FTP server, potentially leading to service downtime and loss of availability for users.
Recommendation
It is recommended to update the BisonWare FTP Server to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.
Original NVD description (English source)
BisonWare FTP Server 4.1 and earlier allows remote attackers to cause a denial of service via a malformed PORT command that contains a non-numeric character and a large number of carriage returns.