Synology Cloud Station Elevation of Privilege Vulnerability

Synology Cloud Station is a solution for synchronizing data between all devices using a cloud station. A security vulnerability in the clientchown tool in the Synology Cloud Station's synchronization client client for OS X-based platforms allows a local attacker to change the ownership of arbitra...

PT-2015-5936

Name of the Vulnerable Software and Affected Versions Synology Cloud Station versions 1.1-2291 through 3.1-3320 Description The issue allows local users to change the ownership of arbitrary files and consequently obtain root access by specifying a filename. This is related to the client chown...