CVE-2016-10330: Path Traversal
Published May 12, 2017
·Updated
Directory traversal vulnerability in synophotodsmuser, a SUID program, as used in Synology Photo Station before 6.5.3-3226 allows local users to write to arbitrary files via unspecified vectors.
Affected Software
1 affected component
Synology Photo Station<=6.5.2-3225
Event History
May 12, 2017
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2016-10330?
CVE-2016-10330 is considered to be of high severity due to its potential for local privilege escalation.
2
How do I fix CVE-2016-10330?
To fix CVE-2016-10330, update Synology Photo Station to version 6.5.3-3226 or later.
3
Who is affected by CVE-2016-10330?
Local users of Synology Photo Station versions prior to 6.5.3-3226 are affected by CVE-2016-10330.
4
What is the nature of the vulnerability in CVE-2016-10330?
CVE-2016-10330 is a directory traversal vulnerability allowing local users to write to arbitrary files.
5
When was CVE-2016-10330 disclosed?
CVE-2016-10330 was disclosed in early 2016.