CVE-2017-8805
Debian ftpsync before 20171017 does not use the rsync --safe-links option, which allows remote attackers to conduct directory traversal attacks via a crafted upstream mirror.
Published: 2017-10-17 · CVSS: Unscored
Debian ftpsync before 20171017 does not use the rsync --safe-links option, which allows remote attackers to conduct directory traversal attacks via a crafted upstream mirror.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7