VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Sep 21, 2017· Updated Jun 17, 2026

CVE-2017-12170

CVE-2017-12170

Description

Downstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was vulnerable to packaging error due to which the original configuration was ignored after update and service started running with default configuration. This has security implications because of overriding security-related configuration. This issue doesn't affect upstream version of pure-ftpd.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Pureftpd/Pureftpd
    cpe:2.3:a:pureftpd:pure-ftpd:1.0.46-1:*:*:*:*:*:*:*
  • Fedoraproject/Fedora2 versions
    cpe:2.3:o:fedoraproject:fedora:26:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:fedoraproject:fedora:26:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:27:*:*:*:*:*:*:*
  • Fedorahosted/pure-ftpdllm-create
    Range: <=1.0.46-1
  • Red Hat, Inc./pure-ftpdv5
    Range: Fedora downstream version pure-ftpd-1.0.46-1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.