VYPR
Get started
← All advisories
Critical severity9.8NVD Advisory· Published Sep 21, 2017· Updated May 13, 2026

CVE-2017-12170

CVE-2017-12170

Description

Downstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was vulnerable to packaging error due to which the original configuration was ignored after update and service started running with default configuration. This has security implications because of overriding security-related configuration. This issue doesn't affect upstream version of pure-ftpd.

Affected products

4
  • Pureftpd/Pureftpd
    cpe:2.3:a:pureftpd:pure-ftpd:1.0.46-1:*:*:*:*:*:*:*
  • Fedoraproject/Fedora2 versions
    cpe:2.3:o:fedoraproject:fedora:26:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:fedoraproject:fedora:26:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:27:*:*:*:*:*:*:*
  • Red Hat, Inc./pure-ftpdv5
    Range: Fedora downstream version pure-ftpd-1.0.46-1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.