{"id":"DEBIAN-CVE-2025-68920","details":"C-Kermit (aka ckermit) through 10.0 Beta.12 (aka 416-beta12) before 244644d allows a remote Kermit system to overwrite files on the local system, or retrieve arbitrary files from the local system.","modified":"2026-09-01T20:05:58.284450225Z","published":"2025-12-24T22:15:43.550Z","upstream":["CVE-2025-68920"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2025-68920"}],"affected":[{"package":{"name":"ckermit","ecosystem":"Debian:12","purl":"pkg:deb/debian/ckermit?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:11.0-1","1:11.0-2","1:11.0-3","1:11.0-4","1:11.0.502-1","1:11.0.502-2","1:11.0.502-2~bpo13+1","1:11.0.504-1","1:11.0.506-1","1:11.0.506-1~bpo13+1","1:11.0.508-1","402~beta08-1","404~beta09-1","405~beta10-1","405~beta10-2","405~beta10-2~bpo12+1","408~beta11.20240207-1","408~beta11.20240207-1~bpo12+1","414~beta11-1","414~beta11-2","414~beta11-3","414~beta11-3~bpo12+1","416~beta12-1","416~beta12-1.1","416~beta12-2","416~beta12-3","416~beta12-3~bpo13+1","416~beta12-4","416~beta12-5"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-68920.json"}},{"package":{"name":"ckermit","ecosystem":"Debian:13","purl":"pkg:deb/debian/ckermit?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"416~beta12-1+deb13u1"}]}],"versions":["416~beta12-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-68920.json"}},{"package":{"name":"ckermit","ecosystem":"Debian:14","purl":"pkg:deb/debian/ckermit?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"416~beta12-5"}]}],"versions":["416~beta12-1","416~beta12-1.1","416~beta12-2","416~beta12-3","416~beta12-3~bpo13+1","416~beta12-4"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-68920.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L"}]}