Threats tagged 'ghsa-542h-5cxr-8mcv'

C-Kermit versions from 6.0.192 up to but not including 11.1.515 have a vulnerability that allows malicious senders to bypass file collision protection. This flaw lets attackers append data to existing files by marking transfers as RESEND. The issue arises because the gattr() function clears the REJECT discard flag and switches to APPEND mode without prompting for RECEIVE CONFIRM, enabling unauthorized file modifications such as altering shell startup files.