CVE record · 1 source
CVE-2026-129121
CVSS 6.5C-Kermit 8.0.200 before 11.1.515 contains a path traversal vulnerability in doftpget() in ckcftp.c that allows malicious FTP servers to write files…
- Vendor
- OpenKermit
- Product
- C-Kermit
- CVSS v3.1
- 6.5 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- Weakness
- CWE-22
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
C-Kermit 8.0.200 before 11.1.515 contains a path traversal vulnerability in doftpget() in ckcftp.c that allows malicious FTP servers to write files…
C-Kermit 8.0.200 before 11.1.515 contains a path traversal vulnerability in doftpget() in ckcftp.c that allows malicious FTP servers to write files outside the intended directory. Attackers can return absolute paths, tilde names…