Vulnerability in Apple Mac Os X
CVE-2015-2851
client_chown in the sync client in Synology Cloud Station 1.1-2291 through 3.1-3320 on OS X allows local users to change the ownership of arbitrary files, and consequently obtain root access, by specifying a filename.
EPSS: 0.008 (51.4th percentile) — read the EPSS interpretation.
Affected products
- Apple Mac_os_x
- Synology Cloud_station — versions 1.1-2291, 2.0-2291, 2.0-2402
- N/a — versions n/a
Weakness classification (CWE)
References
- cret@cert.org (vdb-entry, x_refsource_BID)
- cret@cert.org (x_refsource_CONFIRM, US Government Resource, Third Party Advisory)
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)