VULNERABILITY INTELLIGENCE

CVE-2017-12170

CVSS score9.8 CRITICAL

EPSS probability1.52%

CISA KEVNot currently listed

Published2017-09-21

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Downstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was vulnerable to packaging error due to which the original configuration was ignored after update and service started running with default configuration. This has security implications because of overriding security-related configuration. This issue doesn't affect upstream version of pure-ftpd.

Primary references

secalert@redhat.com — Issue Tracking, Tool Signature, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Tool Signature, VDB Entry