Debian ftpsync before 20171017 does not use the rsync --safe-links option, which allows remote attackers to conduct directory traversal attacks via a crafted upstream mirror...
9.1CVSS7.3AI score0.03024EPSS
SaveExploits0References3
NVD•added 2017/10/17 6:29 p.m.•30 views
CVE-2017-8805
Debian ftpsync before 20171017 does not use the rsync --safe-links option, which allows remote attackers to conduct directory traversal attacks via a crafted upstream mirror...