CVE-2007-6483
medium · 5Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.0.0 through 7.4.0 and possibly earlier versions, and Sentinel Keys Server 1.0.3 and possibly earlier versions, allows remote attackers to read arbitrary files via a .. (dot dot) in the query string.
5
CVSS
10.4%
EPSS (exploit prob.)
96th
EPSS percentile
2007-12-20
Published
AV:N/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-22
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| safenet | sentinel_keys_server | 1.0.3 |
| safenet | sentinel_protection_server | 7.0 |
| safenet | sentinel_protection_server | 7.1 |
| safenet | sentinel_protection_server | 7.2 |
| safenet | sentinel_protection_server | 7.3 |
| safenet | sentinel_protection_server | 7.4 |
Check a specific version with /api/v1/cve/match.
References
- http://safenet-inc.com/support/files/SPI740SecurityPatch.zip
- http://secunia.com/advisories/27811
- http://securityreason.com/securityalert/3471
- http://www.securityfocus.com/archive/1/484201/100/200/threaded
- http://www.securityfocus.com/archive/1/484224/100/200/threaded
- http://www.securityfocus.com/bid/26583
- http://www.securitytracker.com/id?1018992
- http://www.vupen.com/english/advisories/2007/4011
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38636
- https://ics-cert.us-cert.gov/advisories/ICSA-15-272-01
- http://safenet-inc.com/support/files/SPI740SecurityPatch.zip
- http://secunia.com/advisories/27811
- http://securityreason.com/securityalert/3471
- http://www.securityfocus.com/archive/1/484201/100/200/threaded
- http://www.securityfocus.com/archive/1/484224/100/200/threaded
- http://www.securityfocus.com/bid/26583
- http://www.securitytracker.com/id?1018992
- http://www.vupen.com/english/advisories/2007/4011
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38636
- https://ics-cert.us-cert.gov/advisories/ICSA-15-272-01
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2007-6483