CVE-2017-12074

CVE-2017-12074 affects Synology DNS Server prior to 2.2.1-3042. The vulnerability is a directory traversal flaw in SYNO.DNSServer.Zone.MasterZoneConf that allows remote authenticated attackers to write arbitrary files via the domain_name parameter. Affected product: Synology DNS Server (versions ...

PT-2017-12338

Name of the Vulnerable Software and Affected Versions Synology DNS Server versions prior to 2.2.1-3042 Description The issue allows remote authenticated attackers to write arbitrary files via the domain name parameter in the SYNO.DNSServer.Zone.MasterZoneConf. This can be exploited by sending a...

CVE-2017-12074: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the SYNO.DNSServer.Zone.MasterZoneConf in Synology DNS Server before 2.2.1-3042 allows remote authenticated attackers to write arbitrary files via the domainname parameter...