CVE-2007-2950

Опубликовано: 23 июл. 2007

Источник: nvd

CVSS2: 7.2

EPSS Низкий

Описание

Centennial Discovery 2006 Feature Pack 1, which is used by (1) Numara Asset Manager 8.0 and (2) Symantec Discovery 6.5, uses insecure permissions on certain directories, which allows local users to gain privileges.

Ссылки

http://secunia.com/advisories/25354
Vendor Advisory
http://secunia.com/advisories/25374
Vendor Advisory
http://secunia.com/advisories/25379
Vendor Advisory
http://secunia.com/secunia_research/2007-58/advisory/
Vendor Advisory
http://secunia.com/secunia_research/2007-59/advisory/
Vendor Advisory
http://secunia.com/secunia_research/2007-60/advisory/
Vendor Advisory
http://www.securityfocus.com/bid/25000
http://www.vupen.com/english/advisories/2007/2599
http://www.vupen.com/english/advisories/2007/2600
http://www.vupen.com/english/advisories/2007/2603
https://exchange.xforce.ibmcloud.com/vulnerabilities/35562
https://exchange.xforce.ibmcloud.com/vulnerabilities/35563
https://exchange.xforce.ibmcloud.com/vulnerabilities/35564
http://secunia.com/advisories/25354
Vendor Advisory
http://secunia.com/advisories/25374
Vendor Advisory
http://secunia.com/advisories/25379
Vendor Advisory
http://secunia.com/secunia_research/2007-58/advisory/
Vendor Advisory
http://secunia.com/secunia_research/2007-59/advisory/
Vendor Advisory
http://secunia.com/secunia_research/2007-60/advisory/
Vendor Advisory
http://www.securityfocus.com/bid/25000

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:centennial:discovery:2006_featurepack1:*:*:*:*:*:*:*

cpe:2.3:a:numara:asset_manager:8.0:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:centennial:discovery:2006_featurepack1:*:*:*:*:*:*:*

cpe:2.3:a:symantec:discovery:6.5:*:*:*:*:*:*:*

EPSS

Процентиль: 18%

0.00058

Низкий

7.2 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-5hhv-2pjm-ghc2

github

почти 4 года назад