PT-2007-2600 · Numara+2 · Numara Asset Manager+2

Published 2007-05-16 · Updated 2017-07-29 · CVE-2007-1173

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Centennial Discovery 2006 Feature Pack 1 Numara Asset Manager 8.0 Symantec Discovery 6.5

Description The issue is related to multiple buffer overflows in the CentennialIPTransferServer service, which can be exploited by remote attackers to execute arbitrary code. This is achieved by sending crafted TCP packets containing long strings.

Recommendations For Centennial Discovery 2006 Feature Pack 1, update to a version that addresses the buffer overflow issue in the CentennialIPTransferServer service. For Numara Asset Manager 8.0, update to a version that addresses the buffer overflow issue in the CentennialIPTransferServer service. For Symantec Discovery 6.5, update to a version that addresses the buffer overflow issue in the CentennialIPTransferServer service.

Fix

Related Identifiers

CVE-2007-1173

Affected Products

Centennial Discovery

Numara Asset Manager

Symantec Discovery

References · 14

• http://secunia.com/advisories/24090 · Vendor Advisory
• http://secunia.com/advisories/24329 · Vendor Advisory
• http://secunia.com/advisories/24281 · Vendor Advisory
• http://secunia.com/secunia_research/2007-41/advisory · Vendor Advisory
• http://secunia.com/secunia_research/2007-42/advisory · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-1173 · Security Note
• http://secunia.com/secunia_research/2007-43/advisory · Vendor Advisory
• http://osvdb.org/35076 · Note
• http://vupen.com/english/advisories/2007/1834 · Note
• http://securitytracker.com/id?1018072 · Note
• http://securityfocus.com/bid/24002 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34313 · Note
• http://vupen.com/english/advisories/2007/1833 · Note
• http://vupen.com/english/advisories/2007/1832 · Note