CVE-2007-6483 Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.0.0 through 7.4.0 and possibly earlier versions, and Sentinel Keys Server 1.0.3 and possibly earlier versions, allows remote a...
MediumCVSS 5.0
EPSS 10.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.0.0 through 7.4.0 and possibly earlier versions, and Sentinel Keys Server 1.0.3 and possibly earlier versions, allows remote attackers to read arbitrary files via a .. (dot dot) in the query string.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| safenet sentinel keys server | = 1.0.3 | No fix listed |
| safenet sentinel protection server | = 7.0 | No fix listed |
| safenet sentinel protection server | = 7.1 | No fix listed |
| safenet sentinel protection server | = 7.2 | No fix listed |
| safenet sentinel protection server | = 7.3 | No fix listed |
| safenet sentinel protection server | = 7.4 | No fix listed |
References
- safenet-inc.com
- 27811 third-party-advisory vendor-advisory
- 3471 third-party-advisory
- 20071126 2007-06 Sentinel Protection Server Directory Traversal mailing-list
- 20071126 Directory Traversal in SafeNet Sentinel Protection Server and Keys Server mailing-list
- 26583 exploit patch vdb-entry
- 1018992 exploit vdb-entry
- ADV-2007-4011 vdb-entry
- sentinel-protection-directory-traversal(38636) vdb-entry
- ics-cert.us-cert.gov