ID de Prueba:	1.3.6.1.4.1.25623.1.0.105028
Categoría:	Web application abuses
Título:	SafeNet Sentinel Protection Server and Sentinel Keys Server Directory Traversal
Resumen:	SafeNet Sentinel Protection Server and Sentinel Keys Server are prone;to a directory traversal vulnerability because they fail to sufficiently sanitize;user-supplied input.
Descripción:	Summary: SafeNet Sentinel Protection Server and Sentinel Keys Server are prone to a directory traversal vulnerability because they fail to sufficiently sanitize user-supplied input. Vulnerability Impact: Exploiting this issue will allow an attacker to view arbitrary files within the context of the web server. Information harvested may aid in launching further attacks. Affected Software/OS: SafeNet Sentinel Protection Server 7.0.0 through 7.4.0 and Sentinel Keys Server 1.0.3 and 1.0.4 Solution: No known solution was made available for at least one year since the disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2007-6483 BugTraq ID: 26583 http://www.securityfocus.com/bid/26583 Bugtraq: 20071126 2007-06 Sentinel Protection Server Directory Traversal (Google Search) http://www.securityfocus.com/archive/1/484201/100/200/threaded Bugtraq: 20071126 Directory Traversal in SafeNet Sentinel Protection Server and Keys Server (Google Search) http://www.securityfocus.com/archive/1/484224/100/200/threaded https://ics-cert.us-cert.gov/advisories/ICSA-15-272-01 http://www.securitytracker.com/id?1018992 http://secunia.com/advisories/27811 http://securityreason.com/securityalert/3471 http://www.vupen.com/english/advisories/2007/4011 XForce ISS Database: sentinel-protection-directory-traversal(38636) https://exchange.xforce.ibmcloud.com/vulnerabilities/38636
Copyright	Copyright (C) 2014 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.