Threats tagged 'ghsa-99v6-7w9f-g2vx'

C-Kermit versions from 8.0.200 up to but not including 11.1.515 contain a path traversal vulnerability in the doftpget() function. This flaw allows malicious FTP servers to manipulate file paths during recursive FTP get operations, potentially overwriting sensitive files such as .bashrc. Exploitation requires user interaction and can lead to code execution by overwriting configuration files.