CVE:CVE-2007-6483
CNNVD:CNNVD-201504-480
SafeNet Sentinel Protection Server和Keys Server都是SafeNet公司推出的网络加密解决方案。
SafeNet Sentinel Protection Server 7.0.0版本至7.4.0版本和Sentinel Keys Server 1.0.3及之前版本中存在目录遍历漏洞。远程攻击者可借助查询字符串中的目录遍历字符‘..’利用该漏洞读取任意文件。
solution:Upgrade safenet sentinel_keys_server to a higher version than 1.0.3,and avoid the version 1.0.3; Upgrade safenet sentinel_protection_server to a higher version than 7.0,7.1,7.2,7.3,7.4,and avoid the version 7.0,7.1,7.2,7.3,7.4