Signature Detail
Short Name |
HTTP:NOVELL:FILENAME-PARAM-DT |
|---|---|
Severity |
Medium |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Novell Sentinel Log Manager Filename Parameter Directory Traversal |
Release Date |
2015/02/09 |
Update Number |
2465 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Novell Sentinel Log Manager Filename Parameter Directory Traversal
This signature detects attempts to exploit a known vulnerability against Novell Log Manager. A successful exploit can result in a reading arbitrary files.
Extended Description
Sentinel Log Manager is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Successfully exploiting the issue may allow an attacker to obtain sensitive information that could aid in further attacks. Sentinel Log Manager versions 1.2.0.1 and prior are vulnerable.
Affected Products
- Novell Sentinel Log Manager 1.1
- Novell Sentinel Log Manager 1.1.0.1
- Novell Sentinel Log Manager 1.1.0.2
- Novell Sentinel Log Manager 1.1.0.5
- Novell Sentinel Log Manager 1.2.0.1
References
- BugTraq: 51104
- CVE: CVE-2011-5028