CVE-2017-12074

Published: Aug 24, 2017

Modified: Sep 16, 2024

PUBLISHED

Description

Directory traversal vulnerability in the SYNO.DNSServer.Zone.MasterZoneConf in Synology DNS Server before 2.2.1-3042 allows remote authenticated attackers to write arbitrary files via the domain_name parameter.

Vendor	Product	Versions
Synology	Synology DNS Server	affected `before 2.2.1-3042`

Weaknesses (CWE)

CWE-22

References

https://www.synology.com/en-global/support/security/Synology_SA_17_46_DNS_Server

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2017-12074

Description

Affected Products

Weaknesses (CWE)

References