Threats tagged 'ghsa-f8jp-whmp-v2jf'

C-Kermit versions from 8.0.200 up to but not including 11.1.515 contain a buffer overflow vulnerability in the getreply() function within ckcftp.c. This flaw allows malicious FTP servers to overwrite client memory by sending excessively long security replies, specifically long PBSZ replies after AUTH TLS or long ADAT replies in certain authentication builds. The vulnerability can be exploited by attackers controlling or intercepting FTP servers to cause memory corruption.