CVE-2017-12074 | BDVDB-2026-89509 Detail

SynologySynology DNS Server

Description#

Directory traversal vulnerability in the SYNO.DNSServer.Zone.MasterZoneConf in Synology DNS Server before 2.2.1-3042 allows remote authenticated attackers to write arbitrary files via the domain_name parameter.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

References#

https://www.synology.com/en-global/support/security/Synology_SA_17_46_DNS_Server

Exploit#

No public exploit known

History#

Version 12017-08-24Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.