Test ID:	1.3.6.1.4.1.25623.1.0.105152
Category:	Web application abuses
Title:	SafeNet SAS OWA Agent < 1.03.30109 Directory Traversal Vulnerability - Active Check
Summary:	SafeNet Authentication Service (SAS) Outlook Web Access (OWA); Agent (formerly CRYPTOCard) is prone to a directory traversal vulnerability.
Description:	Summary: SafeNet Authentication Service (SAS) Outlook Web Access (OWA) Agent (formerly CRYPTOCard) is prone to a directory traversal vulnerability. Vulnerability Insight: Via a .. (dot dot) in the GetFile parameter to owa/owa it is possible to read arbitrary files. Vulnerability Impact: Successful exploitation will allow remote attackers to download arbitrary files. Affected Software/OS: SafeNet SAS OWA Agent versions prior to 1.03.30109. Solution: Update to version 1.03.30109 or later. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-5359 http://appcheck-ng.com/safenet-sas-owa-agent-directory-traversal-vulnerability/ http://www.safenet-inc.com/technical-support/security-updates/
Copyright	Copyright (C) 2014 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.