CVEvulnerability
CVE-2007-2514
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-06-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Stack-based buffer overflow in XferWan.exe as used in multiple products including (1) Symantec Discovery 6.5, (2) Numara Asset Manager 8.0, and (3) Centennial UK Ltd Discovery 2006 Feature Pack, allows remote attackers to execute arbitrary code via a long request. NOTE: this might be a reservation duplicate of CVE-2007-1173.
Affected configurations
• centennial discovery 2006 featurepack1
• numara asset manager 8.0
• symantec discovery 6.5
References
- http://dvlabs.tippingpoint.com/advisory/TPTI-07-10 Patch
- http://osvdb.org/42059 osvdb.org
- http://securityreason.com/securityalert/2785 securityreason.com
- http://www.securityfocus.com/archive/1/470563/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/24317 Patch
- http://www.securitytracker.com/id?1018191 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34723 exchange.xforce.ibmcloud.com
- http://dvlabs.tippingpoint.com/advisory/TPTI-07-10 Patch
- http://osvdb.org/42059 osvdb.org
- http://securityreason.com/securityalert/2785 securityreason.com
- http://www.securityfocus.com/archive/1/470563/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/24317 Patch
- http://www.securitytracker.com/id?1018191 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34723 exchange.xforce.ibmcloud.com