C-Kermit from 6.0.192 before 11.1.515 contains a file collision protection bypass that allows malicious senders to append data to existing files by…
C-Kermit from 6.0.192 before 11.1.515 contains a file collision protection bypass that allows malicious senders to append data to existing files by marking transfers as RESEND. The gattr() function in ckcfn3.c clears the REJECT discard flag and switches to APPEND without a RECEIVE CONFIRM prompt, letting attackers modify files such as shell startup files.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- OpenKermit
- Product
- C-Kermit
- CVSS v3.1
- 6.5 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- Weakness
- CWE-863
- NVD status
- Received
Why it ranks 18 (Routine)
- CVSS v3.1 6.5 medium
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.