PT-2007-3838 · Numara+2 · Numara Asset Manager+2

Publicado 2007-06-06 · Atualizado 2018-10-16 · CVE-2007-2514

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec Discovery version 6.5 Numara Asset Manager version 8.0 Centennial UK Ltd Discovery 2006 Feature Pack

Description A stack-based buffer overflow issue in XferWan.exe allows remote attackers to execute arbitrary code via a long request.

Recommendations For Symantec Discovery version 6.5, update to a version that includes a fix for this issue. For Numara Asset Manager version 8.0, update to a version that includes a fix for this issue. For Centennial UK Ltd Discovery 2006 Feature Pack, update to a version that includes a fix for this issue.

Correção

Identificadores relacionados

CVE-2007-2514

Produtos afetados

Centennial Uk Ltd Discovery

Numara Asset Manager

Symantec Discovery

Referências · 8

• http://securityfocus.com/bid/24317 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2007-2514 · Nota de Segurança
• http://securityreason.com/securityalert/2785 · Nota
• http://securityfocus.com/archive/1/470563/100/0/threaded · Nota
• http://dvlabs.tippingpoint.com/advisory/TPTI-07-10 · Correção
• http://securitytracker.com/id?1018191 · Nota
• http://osvdb.org/42059 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34723 · Nota