CVE-2007-6483

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 10%

from disclosure to weapon0 days

Published on NVDDec 20

1st PoCNov 26

exploitation probability

10%top 5% of all CVEs

observed exploitation

nono source reports it

2 public exploit(s)

Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.0.0 through 7.4.0 and possibly earlier versions, and Sentinel Keys Server 1.0.3 and possibly earlier versions, allows remote attackers to read arbitrary files via a .. (dot dot) in the query string.

Affected products

n/a · n/a

public PoCs found — 2✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/30809 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/33428

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://safenet-inc.com/support/files/SPI740SecurityPatch.zip http://secunia.com/advisories/27811 http://securityreason.com/securityalert/3471 https://exchange.xforce.ibmcloud.com/vulnerabilities/38636 https://ics-cert.us-cert.gov/advisories/ICSA-15-272-01 http://www.securityfocus.com/archive/1/484201/100/200/threaded http://www.securityfocus.com/archive/1/484224/100/200/threaded http://www.securityfocus.com/bid/26583 http://www.securitytracker.com/id?1018992 http://www.vupen.com/english/advisories/2007/4011