CVE-2016-10330

Published: May 12, 2017

Modified: Aug 6, 2024

PUBLISHED

Description

Directory traversal vulnerability in synophoto_dsm_user, a SUID program, as used in Synology Photo Station before 6.5.3-3226 allows local users to write to arbitrary files via unspecified vectors.

Vendor	Product	Versions
Synology	Synology Photo Station	affected `All versions prior to version 6.5.3-3226`

Weaknesses (CWE)

CWE-22

References

https://bamboofox.github.io/2017/03/20/Synology-Bug-Bounty-2016/#Vul-04-Privilege-Escalation

x_refsource_MISC

https://bamboofox.github.io/2017/03/20/Synology-Bug-Bounty-2016/#Vul-03-Read-Write-Arbitrary-Files

x_refsource_MISC

https://www.synology.com/en-global/support/security/Photo_Station_6_5_3_3226

x_refsource_CONFIRM

[oss-security] 20160128 CVE request: Synology Photo Station command injection and privilege escalation

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2016-10330

Description

Affected Products

Weaknesses (CWE)

References