CVE-2018-25229 is a denial of service vulnerability affecting BulletProof FTP Server 2019.0.0.50, specifically within its SMTP configuration interface. A local attacker with low privileges can crash the application by supplying an oversized string (e.g., 257 'A' characters) in the SMTP Server field, resulting in a high impact to availability (CVSS 7.1 High). There is no known public exploit code (Metasploit, Nuclei, ExploitDB) or evidence of active exploitation, and it is not listed on CISA's KEV catalog. Community discussion and media coverage are minimal, suggesting low public attention and a very low probability of exploitation according to its EPSS score.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2019.0.0.50CPE matchmatch criteria | cpe:2.3:a:bpftpserver:bulletproof_ftp_server:2019.0.0.50:*:*:*:*:*:*:* |
CVSS version used by this source: 4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.