PT-2007-7317 · Safenet · Safenet Sentinel Keys Server+1

Published 2007-12-20 · Updated 2018-10-15 · CVE-2007-6483

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SafeNet Sentinel Protection Server versions 7.0.0 through 7.4.0 SafeNet Sentinel Keys Server version 1.0.3 and possibly earlier versions

Description A directory traversal issue allows remote attackers to read arbitrary files by including a .. (dot dot) in the query string.

Recommendations For SafeNet Sentinel Protection Server versions 7.0.0 through 7.4.0, consider restricting access to sensitive files until a patch is available. For SafeNet Sentinel Keys Server version 1.0.3 and possibly earlier versions, avoid using the query string to access files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2007-6483

Affected Products

Safenet Sentinel Keys Server

Safenet Sentinel Protection Server

References · 13

• 🔥 https://exploit-db.com/exploits/30809 · Exploit
• 🔥 http://securityfocus.com/bid/26583 · Exploit
• 🔥 https://exploit-db.com/exploits/33428 · Exploit
• 🔥 http://securitytracker.com/id?1018992 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-6483 · Security Note
• http://secunia.com/advisories/27811 · Vendor Advisory
• http://safenet-inc.com/support/files/SPI740SecurityPatch.zip · Note
• http://vupen.com/english/advisories/2007/4011 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-15-272-01 · Note
• http://securityreason.com/securityalert/3471 · Note
• http://securityfocus.com/archive/1/484201/100/200/threaded · Note
• http://securityfocus.com/archive/1/484224/100/200/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38636 · Note