CVE-2007-2514
Severity Score
9.3
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Stack-based buffer overflow in XferWan.exe as used in multiple products including (1) Symantec Discovery 6.5, (2) Numara Asset Manager 8.0, and (3) Centennial UK Ltd Discovery 2006 Feature Pack, allows remote attackers to execute arbitrary code via a long request. NOTE: this might be a reservation duplicate of CVE-2007-1173.
Desbordamiento de búfer basado en pila en el XferWan.exe como el utilizado en múltiples productos incluidos (1) Symantec Discovery 6.5, (2) Numara Asset Manager 8.0 y (3) Centennial UK Ltd Discovery 2006 Feature Pack, permite a atacantes remotos ejecutar código de su elección a través de una petición larga. NOTA: esta vulnerabilidad puede ser una réplica de la CVE-2007-1173.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2007-05-07 CVE Reserved
- 2007-06-06 CVE Published
- 2024-08-01 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (7)
| URL | Tag | Source |
|---|---|---|
| http://osvdb.org/42059 | Vdb Entry | |
| http://securityreason.com/securityalert/2785 | Third Party Advisory | |
| http://www.securityfocus.com/archive/1/470563/100/0/threaded | Mailing List | |
| http://www.securitytracker.com/id?1018191 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/34723 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://dvlabs.tippingpoint.com/advisory/TPTI-07-10 | 2018-10-16 | |
| http://www.securityfocus.com/bid/24317 | 2018-10-16 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Centennial Search vendor "Centennial" | Discovery Search vendor "Centennial" for product "Discovery" | 2006_featurepack1 Search vendor "Centennial" for product "Discovery" and version "2006_featurepack1" | - |
Affected
| ||||||
| Numara Search vendor "Numara" | Asset Manager Search vendor "Numara" for product "Asset Manager" | 8.0 Search vendor "Numara" for product "Asset Manager" and version "8.0" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Discovery Search vendor "Symantec" for product "Discovery" | 6.5 Search vendor "Symantec" for product "Discovery" and version "6.5" | - |
Affected
| ||||||