Approved changes feed: RSS · Atom

cpe:2.3:a:debian:ftpsync:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDebian (4199fb5b-36f6-5ceb-83d5-855460345e36)
ProductFtpsync (8cb41708-54bd-51ce-a0d6-96bdba379b43)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/ftpsync purl2cpe 2026-06-01 10:17:13.175908
pkg:deb/ubuntu/ftpsync purl2cpe 2026-06-01 10:17:13.175911
pkg:github/jeffwelling/ftpsync purl2cpe 2026-06-01 10:17:13.175914
pkg:github/rgeissert/ftpsync purl2cpe 2026-06-01 10:17:13.175917

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-8805 vulnerable 2026-06-08 05:10:08.922122 Details available
Debian ftpsync before 20171017 does not use the rsync --safe-links option, which allows remote attackers to conduct directory traversal attacks via a crafted upstream mirror.
Published: 2017-10-17T18:00:00.000Z
Updated: 2024-08-05T16:48:21.804Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.