CVE-2007-6483

Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.0.0 through 7.4.0 and possibly earlier versions, and Sentinel Keys Server 1.0.3 and possibly earlier versions, allows remote attackers to read arbitrary files via a .. (dot dot) in the query string.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2007-12-20

Last modified

2024-08-07

Weaknesses

CWE-22

Affected products

• Sentinel Keys Server (Safenet)
• Sentinel Protection Server (Safenet)

References

• http://safenet-inc.com/support/files/SPI740SecurityPatch.zip
• http://secunia.com/advisories/27811
• http://securityreason.com/securityalert/3471
• http://www.securityfocus.com/archive/1/484201/100/200/threaded
• http://www.securityfocus.com/archive/1/484224/100/200/threaded
• http://www.securityfocus.com/bid/26583
• http://www.securitytracker.com/id?1018992
• http://www.vupen.com/english/advisories/2007/4011
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38636
• https://ics-cert.us-cert.gov/advisories/ICSA-15-272-01