PT-2007-7317 · Safenet · Safenet Sentinel Keys Server+1

Publicado 2007-12-20 · Atualizado 2018-10-15 · CVE-2007-6483

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SafeNet Sentinel Protection Server versions 7.0.0 through 7.4.0 SafeNet Sentinel Keys Server version 1.0.3 and possibly earlier versions

Description A directory traversal issue allows remote attackers to read arbitrary files by including a .. (dot dot) in the query string.

Recommendations For SafeNet Sentinel Protection Server versions 7.0.0 through 7.4.0, consider restricting access to sensitive files until a patch is available. For SafeNet Sentinel Keys Server version 1.0.3 and possibly earlier versions, avoid using the query string to access files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2007-6483

Produtos afetados

Safenet Sentinel Keys Server

Safenet Sentinel Protection Server

Referências · 13

• 🔥 https://exploit-db.com/exploits/30809 · Exploit
• 🔥 http://securityfocus.com/bid/26583 · Exploit
• 🔥 https://exploit-db.com/exploits/33428 · Exploit
• 🔥 http://securitytracker.com/id?1018992 · Exploit
• http://safenet-inc.com/support/files/SPI740SecurityPatch.zip · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-6483 · Nota de Segurança
• http://secunia.com/advisories/27811 · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/4011 · Nota
• https://ics-cert.us-cert.gov/advisories/ICSA-15-272-01 · Nota
• http://securityreason.com/securityalert/3471 · Nota
• http://securityfocus.com/archive/1/484201/100/200/threaded · Nota
• http://securityfocus.com/archive/1/484224/100/200/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38636 · Nota