| Package | Affected versions | Patched versions |
|---|---|---|
| cloud station | = 1.1-2291= 2.0-2291= 2.0-2402= 2.1-2561= 2.1-2570= 2.1-2577= 3.0-3005= 3.0-3103= 3.0-3108= 3.0-3109= 3.0-3111= 3.1-3317= 3.1-3320 |
client_chown in the sync client in Synology Cloud Station 1.1-2291 through 3.1-3320 on OS X allows local users to change the ownership of arbitrary files, and consequently obtain root access, by specifying a filename.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free