← volver
CVE-2007-6483

CVE-2007-6483

EPSS 10.4%
Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.0.0 through 7.4.0 and possibly earlier versions, and Sentinel Keys Server 1.0.3 and possibly earlier versions, allows remote attackers to read arbitrary files via a .. (dot dot) in the query string.
Productos afectados
n/a · n/a
PoCs públicas encontradas — 2
exploitdbwww.exploit-db.com/exploits/30809no verificadoexploitdbwww.exploit-db.com/exploits/33428no verificado
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
http://safenet-inc.com/support/files/SPI740SecurityPatch.ziphttp://secunia.com/advisories/27811http://securityreason.com/securityalert/3471https://exchange.xforce.ibmcloud.com/vulnerabilities/38636https://ics-cert.us-cert.gov/advisories/ICSA-15-272-01http://www.securityfocus.com/archive/1/484201/100/200/threadedhttp://www.securityfocus.com/archive/1/484224/100/200/threadedhttp://www.securityfocus.com/bid/26583http://www.securitytracker.com/id?1018992http://www.vupen.com/english/advisories/2007/4011