PT-2007-2600 · Numara+2 · Numara Asset Manager+2

Publicado 2007-05-16 · Atualizado 2017-07-29 · CVE-2007-1173

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Centennial Discovery 2006 Feature Pack 1 Numara Asset Manager 8.0 Symantec Discovery 6.5

Description The issue is related to multiple buffer overflows in the CentennialIPTransferServer service, which can be exploited by remote attackers to execute arbitrary code. This is achieved by sending crafted TCP packets containing long strings.

Recommendations For Centennial Discovery 2006 Feature Pack 1, update to a version that addresses the buffer overflow issue in the CentennialIPTransferServer service. For Numara Asset Manager 8.0, update to a version that addresses the buffer overflow issue in the CentennialIPTransferServer service. For Symantec Discovery 6.5, update to a version that addresses the buffer overflow issue in the CentennialIPTransferServer service.

Correção

Identificadores relacionados

CVE-2007-1173

Produtos afetados

Centennial Discovery

Numara Asset Manager

Symantec Discovery

Referências · 14

• http://secunia.com/advisories/24090 · Aviso do Fabricante
• http://osvdb.org/35076 · Nota
• http://vupen.com/english/advisories/2007/1834 · Nota
• http://secunia.com/advisories/24329 · Aviso do Fabricante
• http://secunia.com/advisories/24281 · Aviso do Fabricante
• http://secunia.com/secunia_research/2007-41/advisory · Aviso do Fabricante
• http://securitytracker.com/id?1018072 · Nota
• http://secunia.com/secunia_research/2007-42/advisory · Aviso do Fabricante
• http://securityfocus.com/bid/24002 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34313 · Nota
• http://vupen.com/english/advisories/2007/1833 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1173 · Nota de Segurança
• http://vupen.com/english/advisories/2007/1832 · Nota
• http://secunia.com/secunia_research/2007-43/advisory · Aviso do Fabricante