CVE-2007-2950

Centennial Discovery 2006 Feature Pack 1, which is used by (1) Numara Asset Manager 8.0 and (2) Symantec Discovery 6.5, uses insecure permissions on certain directories, which allows local users to gain privileges.

• http://secunia.com/advisories/25354Vendor Advisory
• http://secunia.com/advisories/25374Vendor Advisory
• http://secunia.com/advisories/25379Vendor Advisory
• http://secunia.com/secunia_research/2007-58/advisory/Vendor Advisory
• http://secunia.com/secunia_research/2007-59/advisory/Vendor Advisory
• http://secunia.com/secunia_research/2007-60/advisory/Vendor Advisory
• http://www.securityfocus.com/bid/25000
• http://www.vupen.com/english/advisories/2007/2599
• http://www.vupen.com/english/advisories/2007/2600
• http://www.vupen.com/english/advisories/2007/2603
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35562
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35563
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35564
• http://secunia.com/advisories/25354Vendor Advisory
• http://secunia.com/advisories/25374Vendor Advisory
• http://secunia.com/advisories/25379Vendor Advisory
• http://secunia.com/secunia_research/2007-58/advisory/Vendor Advisory
• http://secunia.com/secunia_research/2007-59/advisory/Vendor Advisory
• http://secunia.com/secunia_research/2007-60/advisory/Vendor Advisory
• http://www.securityfocus.com/bid/25000
• http://www.vupen.com/english/advisories/2007/2599
• http://www.vupen.com/english/advisories/2007/2600
• http://www.vupen.com/english/advisories/2007/2603
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35562
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35563
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35564

Published

Jul 23, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-2944WabCMS 1.0 stores sensitive information under the web root w…
• CVE-2007-2945RMForum stores sensitive information under the web root with…
• CVE-2007-2946Buffer overflow in a certain ActiveX control in LeadTools Ra…
• CVE-2007-2947Multiple PHP remote file inclusion vulnerabilities in OpenBA…
• CVE-2007-2948Multiple stack-based buffer overflows in stream/stream_cddb.…
• CVE-2007-2949Integer overflow in the seek_to_and_unpack_pixeldata functio…
• CVE-2007-2951The parseIrcUrl function in src/kvirc/kernel/kvi_ircurl.cpp …
• CVE-2007-2952Multiple stack-based buffer overflows in the filter service …
• CVE-2007-2953Format string vulnerability in the helptags_one function in …
• CVE-2007-2954Multiple stack-based buffer overflows in the Spooler service…
• CVE-2007-2955Multiple unspecified "input validation error" vulnerabilitie…
• CVE-2007-2956Stack-based buffer overflow in the readRadianceHeader functi…