Unscored CVE-2017-12074 EUVD-2017-3660GHSA-mqph-37g3-x4m7

Directory traversal vulnerability in the SYNO.DNSServer.Zone.MasterZoneConf in Synology DNS Server before 2.2.1-3042 allows remote authenti…

Published Aug 24, 2017 · Updated Sep 16, 2024 · Assigned by synology

Vendor: Synology Product: Synology DNS Server

Description

Directory traversal vulnerability in the SYNO.DNSServer.Zone.MasterZoneConf in Synology DNS Server before 2.2.1-3042 allows remote authenticated attackers to write arbitrary files via the domain_name parameter.

Affected products

Vendor	Product	Affected	Fixed
Synology	Synology DNS Server	before 2.2.1-3042	—

References

https://www.synology.com/en-global/support/security/Synology_SA_17_46_DNS_Server