← Vulnerability feed

Vulnerability record · CVE-1999-1156 · published 17 May 1999

CVE-1999-1156: Bisonware ftp server vulnerability

BBisonware · Bisonware Ftp Server

BisonWare FTP Server 4.1 and earlier allows remote attackers to cause a denial of service via a malformed PORT command that contains a non-numeric character and a large number of carriage returns.

5.0 CVSS 2.0 Medium EPSS 1.3% · top 31.3%
5.0CVSS 2.0 base score
1.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
16 Jun 2026Last modified by NVD

Description

BisonWare FTP Server 4.1 and earlier allows remote attackers to cause a denial of service via a malformed PORT command that contains a non-numeric character and a large number of carriage returns.

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://exchange.xforce.ibmcloud.com/vulnerabilities/2254
https://exchange.xforce.ibmcloud.com/vulnerabilities/2254

Track CVE-1999-1156 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-1999-1510Bisonware FTP Server buffer overflow in USER, LIST and CWD commandsBisonware FTP server prior to 4.1 contains buffer overflows reachable through long USER, LIST, or CWD commands. A remote attacker can crash the servi…EPSS 67%analysed5.0CVE-1999-0079Bisonware ftp server vulnerabilityRemote attackers can cause a denial of service in FTP by issuing multiple PASV commands, causing the server to run out of available ports.EPSS 2.2%

Source: NIST National Vulnerability Database (record CVE-1999-1156), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.