ChangeIntel IT change radar

Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2018-25229

BulletProof FTP Server 2019.0.0.50 Denial of Service via SMTP

CVSS 4.0 6.8 MEDIUMCVSS 3.1 5.5 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

Historical advisory recorded 23 Oct 2026 15:48:27 UTC. Read the latest advisory.

cve-program · CVE-2018-25229

Published

BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the SMTP configuration interface that allows local attackers to crash the application by supplying an oversized string. Attackers can input a buffer of 257 'A' characters in the SMTP Server field and trigger a crash by clicking the Test button.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2018-25229

Published

BulletProof FTP Server

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Bpftpserver",
                    "product": "BulletProof FTP Server",
                    "versions": [
                        {
                            "version": "2019.0.0.50",
                            "status": "affected"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON