Bug 2573262 (CVE-2026-129119) - CVE-2026-129119 ckermit: ckermit: Unauthorized file modification via RESEND transfer collision protection bypass
Summary: CVE-2026-129119 ckermit: ckermit: Unauthorized file modification via RESEND t...
Keywords:
Status: NEW
Alias: CVE-2026-129119
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-11-13 16:32 UTC by OSIDB Bzimport
Modified: 2026-11-13 16:51 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-11-13 16:32:55 UTC 
C-Kermit from 6.0.192 before 11.1.515 contains a file collision protection bypass that allows malicious senders to append data to existing files by marking transfers as RESEND. The gattr() function in ckcfn3.c clears the REJECT discard flag and switches to APPEND without a RECEIVE CONFIRM prompt, letting attackers modify files such as shell startup files.
Note You need to log in before you can comment on or make changes to this bug.