CVE-2017-8805

CVE-2017-8805 describes a directory traversal vulnerability in Debian ftpsync versions prior to 20171017. The flaw stems from ftpsync's failure to utilize the rsync --safe-links option, enabling remote attackers to traverse directories via a malicious upstream mirror. This critical vulnerability, rated 9.1 CVSS, allows for high impact to confidentiality and integrity with low attack complexity and no user interaction required. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.