description: Debian ftpsync before 20171017 does not use the rsync --safe-links option, which allows remote attackers to conduct directory traversal attacks via a crafted upstream mirror.
problem types: directory traversal
affected:
{
product: Debian ftpsync before 20171017
vendor: n/a
versions:
status: affected, version: Debian ftpsync before 20171017
}