PT-2017-19012

Name of the Vulnerable Software and Affected Versions Synology Photo Station versions 6.0-2528 through 6.7.1-3419 Description A design flaw in the authentication mechanism of Synology Photo Station allows local users to obtain credentials. The synophoto dsm user program is used for authentication...

CVE-2016-10330

Directory traversal vulnerability in synophotodsmuser, a SUID program, as used in Synology Photo Station before 6.5.3-3226 allows local users to write to arbitrary files via unspecified vectors...

PT-2017-7861

Name of the Vulnerable Software and Affected Versions Synology Photo Station versions prior to 6.3-2958 Description The issue allows local users to gain privileges. This is achieved by leveraging setuid execution of a command. The command in question is synophoto dsm user --copy-no-ea...