Sentinel Protection Server/Keys Server Backslash Directory Traversal Vulnerability
BID:27735
Info
Sentinel Protection Server/Keys Server Backslash Directory Traversal Vulnerability
| Bugtraq ID: | 27735 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-0760 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 11 2008 12:00AM |
| Updated: | Apr 03 2008 05:49PM |
| Credit: | Luigi Auriemma discovered this vulnerability. |
| Vulnerable: |
SafeNet Sentinel Protection Server 7.4.1 SafeNet Sentinel Protection Server 7.4 SafeNet Sentinel Protection Server 7.3 SafeNet Sentinel Protection Server 7.2 SafeNet Sentinel Protection Server 7.1 SafeNet Sentinel Protection Server 7.0 SafeNet Sentinel Keys Server 1.0.4 SafeNet Sentinel Keys Server 1.0.3 |
| Not Vulnerable: | |
Discussion
Sentinel Protection Server/Keys Server Backslash Directory Traversal Vulnerability
Sentinel Protection Server and Keys Server are prone to a directory-traversal vulnerability because the software fails to sufficiently sanitize user-supplied input data.
Exploiting this issue may allow an attacker to access sensitive information that could aid in further attacks.
This issue affects Protection Server 7.4.1.0 and Keys Server 1.0.4; earlier versions may also be vulnerable.
NOTE: This issue may be caused by an incomplete security patch released in November 2007 that was documented in BID 26583 ('Sentinel Protection Server/Keys Server Directory Traversal Vulnerability').
Sentinel Protection Server and Keys Server are prone to a directory-traversal vulnerability because the software fails to sufficiently sanitize user-supplied input data.
Exploiting this issue may allow an attacker to access sensitive information that could aid in further attacks.
This issue affects Protection Server 7.4.1.0 and Keys Server 1.0.4; earlier versions may also be vulnerable.
NOTE: This issue may be caused by an incomplete security patch released in November 2007 that was documented in BID 26583 ('Sentinel Protection Server/Keys Server Directory Traversal Vulnerability').
Exploit / POC
Sentinel Protection Server/Keys Server Backslash Directory Traversal Vulnerability
The following proof-of-concept GET request is available:
GET /..\..\..\..\..\..\..\boot.ini HTTP/1.0
The following proof-of-concept GET request is available:
GET /..\..\..\..\..\..\..\boot.ini HTTP/1.0
Solution / Fix
Sentinel Protection Server/Keys Server Backslash Directory Traversal Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Sentinel Protection Server/Keys Server Backslash Directory Traversal Vulnerability
References:
References:
- Sentinel Protection Server Homepage (SafeNet)
- Re: Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0 (Luigi Auriemma
- Re: Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0 (Luigi Auriemma