CVE-2017-8805

CVE-2017-8805 affects Debian ftpsync prior to 20171017. Root cause: ftpsync did not use rsync --safe-links, enabling directory traversal via a crafted upstream mirror. According to CVSS, impact is High for confidentiality and integrity (CVSS v3 base score 9.1; Network attack, no privileges requir...