PT-2007-4248 · Symantec+2 · Symantec Discovery+2

Publicado 2007-07-23 · Atualizado 2017-07-29 · CVE-2007-2950

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Centennial Discovery 2006 Feature Pack 1 Numara Asset Manager version 8.0 Symantec Discovery version 6.5

Description The issue is related to insecure permissions on certain directories. This allows local users to gain privileges.

Recommendations For Centennial Discovery 2006 Feature Pack 1, consider changing the permissions on the affected directories to prevent local users from gaining privileges. For Numara Asset Manager version 8.0, adjust the directory permissions to secure them and prevent unauthorized access. For Symantec Discovery version 6.5, modify the permissions on the vulnerable directories to restrict access and mitigate the risk of privilege escalation.

Correção

Identificadores relacionados

CVE-2007-2950

Produtos afetados

Centennial Discovery

Numara Asset Manager

Symantec Discovery

Referências · 14

• http://vupen.com/english/advisories/2007/2603 · Nota
• http://vupen.com/english/advisories/2007/2599 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2950 · Nota de Segurança
• http://secunia.com/advisories/25374 · Aviso do Fabricante
• http://secunia.com/advisories/25379 · Aviso do Fabricante
• http://secunia.com/secunia_research/2007-59/advisory · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35562 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35563 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35564 · Nota
• http://secunia.com/secunia_research/2007-58/advisory · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/2600 · Nota
• http://secunia.com/secunia_research/2007-60/advisory · Aviso do Fabricante
• http://secunia.com/advisories/25354 · Aviso do Fabricante
• http://securityfocus.com/bid/25000 · Nota