CVE ID:	CVE-2017-17433
Description:	The recv_files function in receiver.c in the daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, proceeds with certain file metadata updates before checking for a filename in the daemon_filter_list data structure, which allows remote attackers to bypass intended access restrictions.
Test IDs:	1.3.6.1.4.1.25623.1.1.2.2021.1731   1.3.6.1.4.1.25623.1.1.2.2019.1659   1.3.6.1.4.1.25623.1.1.2.2019.2334   1.3.6.1.4.1.25623.1.1.2.2021.1748
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2017-17433 Debian Security Information: DSA-4068 (Google Search) https://www.debian.org/security/2017/dsa-4068 https://git.samba.org/?p=rsync.git;a=commit;h=3e06d40029cfdce9d0f73d87cfd4edaf54be9c51 https://lists.debian.org/debian-lts-announce/2017/12/msg00020.html