PT-2007-4248 · Symantec+2 · Symantec Discovery+2

Published 2007-07-23 · Updated 2017-07-29 · CVE-2007-2950

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Centennial Discovery 2006 Feature Pack 1 Numara Asset Manager version 8.0 Symantec Discovery version 6.5

Description The issue is related to insecure permissions on certain directories. This allows local users to gain privileges.

Recommendations For Centennial Discovery 2006 Feature Pack 1, consider changing the permissions on the affected directories to prevent local users from gaining privileges. For Numara Asset Manager version 8.0, adjust the directory permissions to secure them and prevent unauthorized access. For Symantec Discovery version 6.5, modify the permissions on the vulnerable directories to restrict access and mitigate the risk of privilege escalation.

Fix

Related Identifiers

CVE-2007-2950

Affected Products

Centennial Discovery

Numara Asset Manager

Symantec Discovery

References · 14

• https://nvd.nist.gov/vuln/detail/CVE-2007-2950 · Security Note
• http://secunia.com/advisories/25374 · Vendor Advisory
• http://secunia.com/advisories/25379 · Vendor Advisory
• http://secunia.com/secunia_research/2007-59/advisory · Vendor Advisory
• http://secunia.com/secunia_research/2007-58/advisory · Vendor Advisory
• http://secunia.com/secunia_research/2007-60/advisory · Vendor Advisory
• http://secunia.com/advisories/25354 · Vendor Advisory
• http://vupen.com/english/advisories/2007/2603 · Note
• http://vupen.com/english/advisories/2007/2599 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35562 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35563 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35564 · Note
• http://vupen.com/english/advisories/2007/2600 · Note
• http://securityfocus.com/bid/25000 · Note