Multiple vulnerabilities were discovered in C-Kermit through a code quality sweep and audit. The vulnerabilities include remote code execution when working with a malicious peer, authentication bypass with TLS certificate spoofing, and arbitrary file write with safeguard bypass during file transfers. These vulnerabilities have been present since the original C-Kermit from 1984 and its predecessor Unix Kermit from 1983, with most being present for around 20 years.
| Vendor | Product | Versions |
|---|---|---|
| openkermit | c-kermit | < 11.1.515 |
Loading…
