CVE-2008-0760 Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.4.1.0 and earlier, and Sentinel Keys Server 1.0.4.0 and earlier, allows remote attackers to read arbitrary files via a ..\ (do...
MediumCVSS 5.0
EPSS 3.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.4.1.0 and earlier, and Sentinel Keys Server 1.0.4.0 and earlier, allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the URI. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2007-6483.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| safenet sentinel keys server | <= 1.0.4.0 | No fix listed |
| safenet sentinel protection server | <= 7.4.1 | No fix listed |
References
- aluigi.altervista.org exploit
- 28863 third-party-advisory vendor-advisory
- 3646 third-party-advisory
- 20080211 Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0 mailing-list
- 27735 exploit vdb-entry
- ADV-2008-0499 vdb-entry