[Full-disclosure] Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0

[jfvanmeter at comcast.net]

Thanks for the info, I'll try it somemore.

Take Care --John 

 -------------- Original message ----------------------
From: Luigi Auriemma <aluigi at autistici.org>
> jfvanmeter at comcast.net wrote:
> > Interresting, how are you running the Get command? Is safenet
> > installed on a workstation or server? 
> 
> Here I have Windows XP Pro SP2.
> All the tests have been made using the raw GET request as I reported in
> my advisory using netcat because the browsers usually modify the
> delimiters or just the entire URI, for example IE converts backslashes
> in slashes while Firefox drops ../ and converts \ in %5c.
> 
> 
> --- 
> Luigi Auriemma
> http://aluigi.org