CVEvulnerability
CVE-2015-2851
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-05-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:L/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
client_chown in the sync client in Synology Cloud Station 1.1-2291 through 3.1-3320 on OS X allows local users to change the ownership of arbitrary files, and consequently obtain root access, by specifying a filename.
Affected configurations
• synology cloud station 1.1-2291
• synology cloud station 2.0-2291
• synology cloud station 2.0-2402
• synology cloud station 2.1-2561
• synology cloud station 2.1-2570
• synology cloud station 2.1-2577
• synology cloud station 3.0-3005
• synology cloud station 3.0-3103
• synology cloud station 3.0-3108
• synology cloud station 3.0-3109
• synology cloud station 3.0-3111
• synology cloud station 3.1-3317
• synology cloud station 3.1-3320
Related
Weakness · not in database (1)
References
- http://www.kb.cert.org/vuls/id/551972 Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/BLUU-9VBU45 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/74826 www.securityfocus.com
- http://www.kb.cert.org/vuls/id/551972 Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/BLUU-9VBU45 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/74826 www.securityfocus.com