CVE-2011-5028

Novell Sentinel Log Manager < 1.2.0.1_938 - Authenticated Path Traversal via FileDownload Filename Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2011-5028. PoCs published by Andrea Fabrizi.

AI-analyzed exploit summary This is a writeup describing a directory traversal vulnerability in Novell Sentinel Log Manager. It provides a vulnerable URL path that allows authenticated users to access arbitrary system files, such as /etc/passwd.

Description

Directory traversal vulnerability in novelllogmanager/FileDownload in Novell Sentinel Log Manager 1.2.0.1_938 and earlier, as used in Novell Sentinel before 7.0.1.0, allows remote authenticated users to read arbitrary files via a .. (dot dot) in the filename parameter.

Exploits (1)

exploitdb WRITEUP

by Andrea Fabrizi · textwebappsmultiple

https://www.exploit-db.com/exploits/21082

View Code ZIP pw:eip

This is a writeup describing a directory traversal vulnerability in Novell Sentinel Log Manager. It provides a vulnerable URL path that allows authenticated users to access arbitrary system files, such as /etc/passwd.

Classification

Writeup 90%

Attack Type

Info Leak

Complexity

Trivial

Reliability

Reliable

Target: Novell Sentinel Log Manager <= 1.2.0.1

Auth required

Prerequisites: Authenticated access to the application

MITRE ATT&CK