CVE-2015-2851
30.05.2015, 19:59
client_chown in the sync client in Synology Cloud Station 1.1-2291 through 3.1-3320 on OS X allows local users to change the ownership of arbitrary files, and consequently obtain root access, by specifying a filename.Enginsight
| Vendor | Product | Version |
|---|---|---|
| synology | cloud_station | 1.1-2291 |
| synology | cloud_station | 2.0-2291 |
| synology | cloud_station | 2.0-2402 |
| synology | cloud_station | 2.1-2561 |
| synology | cloud_station | 2.1-2570 |
| synology | cloud_station | 2.1-2577 |
| synology | cloud_station | 3.0-3005 |
| synology | cloud_station | 3.0-3103 |
| synology | cloud_station | 3.0-3108 |
| synology | cloud_station | 3.0-3109 |
| synology | cloud_station | 3.0-3111 |
| synology | cloud_station | 3.1-3317 |
| synology | cloud_station | 3.1-3320 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration