CVE Catalog
CVE-2017-8805
CriticalSummary
Debian ftpsync before 20171017 does not use the rsync --safe-links option, allowing remote attackers to conduct directory traversal attacks via a crafted upstream mirror.
Risk Assessment
Attackers may gain access to unauthorized files on the system, potentially leading to the exposure of sensitive data or system compromise.
Recommendation
It is recommended to upgrade to Debian ftpsync version after 20171017 to enable the --safe-links option and minimize the risk of attacks.
Original NVD description (English source)
Debian ftpsync before 20171017 does not use the rsync --safe-links option, which allows remote attackers to conduct directory traversal attacks via a crafted upstream mirror.