Published: 20/12/2007 Updated: 15/10/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 510

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.0.0 up to and including 7.4.0 and possibly earlier versions, and Sentinel Keys Server 1.0.3 and possibly earlier versions, allows remote malicious users to read arbitrary files via a .. (dot dot) in the query string.

Vulnerable Product	Search on Vulmon	Subscribe to Product
safenet sentinel protection server 7.0
safenet sentinel protection server 7.1
safenet sentinel protection server 7.4
safenet sentinel keys server 1.0.3
safenet sentinel protection server 7.2
safenet sentinel protection server 7.3

SafeNet Sentinel Protection Server versions 70 through 74 and Keys Server versions 103 through 104 suffer from a directory traversal vulnerability ...

source: wwwsecurityfocuscom/bid/26583/info Sentinel Protection Server and Keys Server are prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data Exploiting this issue may allow an attacker to access sensitive information that could aid in further attacks This issue affects Prote ...

#!/usr/bin/python # # Exploit Title: SafeNet Sentinel Protection Server 70 - 74 and Sentinel Keys Server 103 - 104 Directory Traversal # Date: 04/28/2014 # Exploit Author: Matt Schmidt (Syph0n) # Vendor Homepage: wwwsafenet-inccom/ # Software Link: c3safenet-inccom/downloads/2/1/21DAC8BE-72DE-4D32-85D4-6A1FC600581E/Sentinel ...

Nothing to see here - test repo

EXPLOITS CVE-2007-6483 SafeNet Sentinel Protection Server 70 < 74 / Sentinel Keys Server 103 < 104 - Directory Traversal CVE-2014-2647 HP Operations Agent - Cross-Site Scripting iFrame Injection

CWE-22 http://safenet-inc.com/support/files/SPI740SecurityPatch.zip http://www.securityfocus.com/bid/26583 http://www.securitytracker.com/id?1018992 http://secunia.com/advisories/27811 http://securityreason.com/securityalert/3471 http://www.vupen.com/english/advisories/2007/4011 https://ics-cert.us-cert.gov/advisories/ICSA-15-272-01 https://exchange.xforce.ibmcloud.com/vulnerabilities/38636 http://www.securityfocus.com/archive/1/484224/100/200/threaded http://www.securityfocus.com/archive/1/484201/100/200/threaded https://nvd.nist.gov https://github.com/syph0n/Exploits https://packetstormsecurity.com/files/126725/SafeNet-Sentinel-Directory-Traversal.html https://www.exploit-db.com/exploits/30809/

CVE-2007-6483

Vulnerability Summary

Vulnerability Trend

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect