← voltar
CVE-2007-6483

CVE-2007-6483

EPSS 10.4%
Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.0.0 through 7.4.0 and possibly earlier versions, and Sentinel Keys Server 1.0.3 and possibly earlier versions, allows remote attackers to read arbitrary files via a .. (dot dot) in the query string.
Produtos afetados
n/a · n/a
PoCs públicas encontradas — 2
exploitdbwww.exploit-db.com/exploits/30809não verificadoexploitdbwww.exploit-db.com/exploits/33428não verificado
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
http://safenet-inc.com/support/files/SPI740SecurityPatch.ziphttp://secunia.com/advisories/27811http://securityreason.com/securityalert/3471https://exchange.xforce.ibmcloud.com/vulnerabilities/38636https://ics-cert.us-cert.gov/advisories/ICSA-15-272-01http://www.securityfocus.com/archive/1/484201/100/200/threadedhttp://www.securityfocus.com/archive/1/484224/100/200/threadedhttp://www.securityfocus.com/bid/26583http://www.securitytracker.com/id?1018992http://www.vupen.com/english/advisories/2007/4011