{"action":"Upgrade linux-ftpd-ssl to 0.17.27+0.3-3 or later.","affected":[{"fixed":"0.17.27+0.3-3","introduced":"0"}],"component":"linux-ftpd-ssl","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["0.17.27+0.3-3"],"id":"tcs_01M5N93PEEYPD2ZPYRTGSHFX4R","modified_at":"2026-10-23T17:47:33.349740240Z","published_at":"2008-09-25T19:25:18.817Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2008-4247","https://security-tracker.debian.org/tracker/CVE-2008-4247"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2008-4247#Debian:14/linux-ftpd-ssl","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2008-4247"}],"summary":"ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct c"}