CVE-2017-12074

CVE-2017-12074 affects Synology DNS Server prior to 2.2.1-3042. The vulnerability is a directory traversal flaw in SYNO.DNSServer.Zone.MasterZoneConf that allows remote authenticated attackers to write arbitrary files via the domain_name parameter. Affected product: Synology DNS Server (versions ...