[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-Id: <20080212173047.f4584599.aluigi@autistici.org>
Date: Tue, 12 Feb 2008 17:30:47 +0100
From: Luigi Auriemma <aluigi@...istici.org>
To: jfvanmeter@...cast.net
Cc: bugtraq@...urityfocus.com, bugs@...uritytracker.com,
news@...uriteam.com, full-disclosure@...ts.grok.org.uk,
vuln@...unia.com, packet@...ketstormsecurity.org
Subject: Re: Directory traversal in SafeNet Sentinel Protection and Key
Server 7.4.1.0
jfvanmeter@...cast.net wrote:
> Hello everyone, was the server rebooted after the patch was installed?
Naturally, in fact before the patch I was able to exploit the directory
traversal with both slash and backslash while after having applied the
fix only when I use the backslash.
I have also uninstalled, redownloaded and reinstalled both the program
and the patch just in this moment and I can confirm the exact behaviour
described above.
---
Luigi Auriemma
http://aluigi.org
Powered by blists - more mailing lists