C-KERMIT · CVE-2026-129123 · Package
NO FIX YET · SEE WHAT TO DO
C-Kermit's FTP client mishandles overlong security replies from a server, overflowing a fixed buffer in getreply() in ckcftp.c. A malicious or intercepted FTP server can overwrite client memory with attacker-controlled bytes.
first public Oct 31, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Teams that run C-Kermit as an FTP client against servers they do not fully control, or over networks where traffic can be intercepted. The description names AUTH TLS (PBSZ replies) and GSSAPI, Kerberos 4 and SRP builds (ADAT replies) as the paths. Systems that never use C-Kermit's FTP client can skip it.
Not affected if no-ftp-client-use, trusted-servers-only
Who cares c-kermit, ftp-client, linux
kermit and check the version banner for C-Kermit 8.0.200 through 11.1.514.11.1.515C-Kermit 8.0.200 before 11.1.515 contains a buffer overflow vulnerability in getreply() in ckcftp.c that allows malicious FTP servers to overwrite client memory by sending overlong security replies. Attackers controlling or intercepting an FTP server can send long PBSZ replies after AUTH TLS, or long ADAT replies in GSSAPI, Kerberos 4, and SRP builds, overflowing the static reply_buf with attacker-controlled bytes.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.