PT-2007-3838 · Numara+2 · Numara Asset Manager+2

Published 2007-06-06 · Updated 2018-10-16 · CVE-2007-2514

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec Discovery version 6.5 Numara Asset Manager version 8.0 Centennial UK Ltd Discovery 2006 Feature Pack

Description A stack-based buffer overflow issue in XferWan.exe allows remote attackers to execute arbitrary code via a long request.

Recommendations For Symantec Discovery version 6.5, update to a version that includes a fix for this issue. For Numara Asset Manager version 8.0, update to a version that includes a fix for this issue. For Centennial UK Ltd Discovery 2006 Feature Pack, update to a version that includes a fix for this issue.

Fix

Related Identifiers

CVE-2007-2514

Affected Products

Centennial Uk Ltd Discovery

Numara Asset Manager

Symantec Discovery

References · 8

• http://securityfocus.com/bid/24317 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-2514 · Security Note
• http://dvlabs.tippingpoint.com/advisory/TPTI-07-10 · Patch
• http://securityreason.com/securityalert/2785 · Note
• http://securityfocus.com/archive/1/470563/100/0/threaded · Note
• http://securitytracker.com/id?1018191 · Note
• http://osvdb.org/42059 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34723 · Note