Re: [Full-disclosure] Directory traversal in SafeNet Sentinel Protection and Key Server

Thanks for the info, I'll try it somemore.

Take Care --John

-------------- Original message ----------------------
From: Luigi Auriemma <aluigi@xxxxxxxxxxxxx>
jfvanmeter@xxxxxxxxxxx wrote:
Interresting, how are you running the Get command? Is safenet
installed on a workstation or server?

Here I have Windows XP Pro SP2.
All the tests have been made using the raw GET request as I reported in
my advisory using netcat because the browsers usually modify the
delimiters or just the entire URI, for example IE converts backslashes
in slashes while Firefox drops ../ and converts \ in %5c.

Luigi Auriemma

Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia -