Bisonware develops FTP server products, where the observed vulnerabilities cluster around path-traversal weaknesses that permit directory-escape attacks through improper pathname validation. Treat this as a compact vendor profile; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Bisonware over time
Signals from CVEs in this vendor scope (5 CVEs).
5 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-1999-1510HIGH Buffer overflows in Bisonware FTP server prior to 4.1 allow remote attackers to cause a denial of service, and possibly execute arbitrary commands, via long (1) USER, (2) LIST, or | May 17, 1999 | 7.5 | 77 | NO | YES |
CVE-2015-7602HIGH Directory traversal vulnerability in BisonWare BisonFTP 3.5 allows remote attackers to read arbitrary files via a ../ (dot dot slash) in a RETR command. | Sep 29, 2015 | 7.8 | 71 | NO | YES |
CVE-1999-0079MEDIUM Remote attackers can cause a denial of service in FTP by issuing multiple PASV commands, causing the server to run out of available ports. | Sep 12, 1997 | 5.0 | 16 | NO | NO |
CVE-1999-1156MEDIUM BisonWare FTP Server 4.1 and earlier allows remote attackers to cause a denial of service via a malformed PORT command that contains a non-numeric character and a large number of c | May 17, 1999 | 5.0 | 15 | NO | NO |
CVE-2001-0765MEDIUM BisonFTP V4R1 allows local users to access directories outside of their home directory by uploading .bdl files, which can then be linked to other directories. | Oct 18, 2001 | 4.6 | 14 | NO | NO |
Signals from CVEs in this vendor scope (5 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Bisonware.
Media articles that mention a CVE ID that affects a product developed by Bisonware — matched by CVE ID, not by vendor name.