CVE-2017-12074

Summary

Directory traversal vulnerability in the SYNO.DNSServer.Zone.MasterZoneConf in Synology DNS Server before 2.2.1-3042 allows remote authenticated attackers to write arbitrary files via the domain_name parameter.

Affected Software

VendorProductVersion RangeStatus
SynologySynology DNS Serverbefore 2.2.1-3042affected

Weaknesses

  • CWE-22: Improper Limitation of a Pathname to a Restricted Directory (CWE-22)

ADP Enrichment

CVE Program Container

Additional References

References