CVE-2017-8805

2017-10-1718:00:00

debian

www.cve.org

AI Score

9.1

Confidence

High

EPSS

0.003

Percentile

68.7%

JSON

Debian ftpsync before 20171017 does not use the rsync --safe-links option, which allows remote attackers to conduct directory traversal attacks via a crafted upstream mirror.

CNA Affected

[
  {
    "product": "Debian ftpsync before 20171017",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Debian ftpsync before 20171017"
      }
    ]
  }
]