[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Directory traversal in SafeNet Sentinel Protection and Key Server 18.104.22.168
> Interresting, how are you running the Get command? Is safenet
> installed on a workstation or server?
Here I have Windows XP Pro SP2.
All the tests have been made using the raw GET request as I reported in
my advisory using netcat because the browsers usually modify the
delimiters or just the entire URI, for example IE converts backslashes
in slashes while Firefox drops ../ and converts \ in %5c.