CVE-2017-12170
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2017-12170
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Downstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was vulnerable to packaging error due to which the original configuration was ignored after update and service started running with default configuration. This has security implications because of overriding security-related configuration. This issue doesn't affect upstream version of pure-ftpd.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Fedora pure-ftpd 配置错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Fedora是由Fedora项目社区开发、美国红帽（Red Hat）公司赞助的一套基于Linux的操作系统。pure-ftpd是其中的一款FTP服务程序。 Fedora中的pure-ftpd的Downstream 1.0.46-1版本存在安全漏洞。远程攻击者可利用该漏洞可能获取或篡改信息，或造成拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Red Hat, Inc. | pure-ftpd | Fedora downstream version pure-ftpd-1.0.46-1 | - |
II. Public POCs for CVE-2017-12170
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2017-12170
请登录查看更多情报信息。
- https://bugzilla.redhat.com/show_bug.cgi?id=1493114x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2017-12170
Same Patch Batch · Red Hat, Inc. · 2017-09-21 · 3 CVEs total
| CVE-2017-7544 | libexif 安全漏洞 | |
| CVE-2017-7549 | Red Hat OpenStack Platform 后置链接漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2017-12170
No comments yet