CVE-2007-6483

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• SafeNet Sentinel Protection Server 7.0 < 7.4 / Sentinel Keys Server 1.0.3 < 1.0.4 - Directory Traversal2014-05-19 · webapps · windows · Verified
• SafeNet Sentinel Protection Server 7.x/Keys Server 1.0.3 - Directory Traversal2007-11-26 · remote · windows · Verified

Impact

Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.0.0 through 7.4.0 and possibly earlier versions, and Sentinel Keys Server 1.0.3 and possibly earlier versions, allows remote attackers to read arbitrary files via a .. (dot dot) in the query string.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://safenet-inc.com/support/files/SPI740SecurityPatch.zip
• http://secunia.com/advisories/27811
• http://securityreason.com/securityalert/3471
• http://www.securityfocus.com/archive/1/484201/100/200/threaded
• http://www.securityfocus.com/archive/1/484224/100/200/threaded
• http://www.securityfocus.com/bid/26583
• http://www.securitytracker.com/id?1018992
• http://www.vupen.com/english/advisories/2007/4011
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38636
• https://ics-cert.us-cert.gov/advisories/ICSA-15-272-01
• http://safenet-inc.com/support/files/SPI740SecurityPatch.zip
• http://secunia.com/advisories/27811
• http://securityreason.com/securityalert/3471
• http://www.securityfocus.com/archive/1/484201/100/200/threaded
• http://www.securityfocus.com/archive/1/484224/100/200/threaded
• http://www.securityfocus.com/bid/26583
• http://www.securitytracker.com/id?1018992
• http://www.vupen.com/english/advisories/2007/4011
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38636
• https://ics-cert.us-cert.gov/advisories/ICSA-15-272-01