CVE-1999-1156: Bisonware FTP Server

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

BisonWare FTP Server 4.1 and earlier allows remote attackers to cause a denial of service via a malformed PORT command that contains a non-numeric character and a large number of carriage returns.

Affected products

• Bisonware Bisonware FTP Server: up to and including 4.1

Published 1999-05-17. Last modified 2026-06-16.