CVE-2007-6483: Path Traversal

Published Dec 20, 2007

Updated

Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.0.0 through 7.4.0 and possibly earlier versions, and Sentinel Keys Server 1.0.3 and possibly earlier versions, allows remote attackers to read arbitrary files via a .. (dot dot) in the query string.

Affected Software

6 affected components

SafeNet Sentinel Keys Server=1.0.3

SafeNet Sentinel Protection Server=7.0

SafeNet Sentinel Protection Server=7.1

SafeNet Sentinel Protection Server=7.2

SafeNet Sentinel Protection Server=7.3

SafeNet Sentinel Protection Server=7.4

Remediation

Patch Available

http://www.securityfocus.com/bid/26583

Event History

Dec 20, 2007

CVE Published

08:46 PM

Dec 21, 2007

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-6483?

CVE-2007-6483 is considered a moderate severity vulnerability due to its potential to allow remote attackers to read arbitrary files.

How do I fix CVE-2007-6483?

To fix CVE-2007-6483, update the SafeNet Sentinel Protection Server to version 7.4.1 or later, as well as ensure proper input validation to avoid directory traversal.

What software is affected by CVE-2007-6483?

CVE-2007-6483 affects SafeNet Sentinel Protection Server versions 7.0.0 through 7.4.0 and Sentinel Keys Server version 1.0.3.

Can CVE-2007-6483 lead to unauthorized access?

Yes, CVE-2007-6483 can lead to unauthorized access to sensitive files on the server if exploited.

Is there a known exploit for CVE-2007-6483?

Yes, there are known exploits for CVE-2007-6483 that demonstrate the directory traversal vulnerability.