Discovery and Asset Manager Local Privilege Escalation Vulnerability

Bugtraq ID:	25000
Class:	Design Error
CVE:	CVE-2007-2950
Remote:	No
Local:	Yes
Published:	Jul 23 2007 12:00AM
Updated:	Jul 27 2007 11:25PM
Credit:	Sven Krewitt of Secunia Research discovered this issue.
Vulnerable:	Symantec Discovery 6.0 Symantec Discovery 6.5 Numara Numara Asset Manager 8.0 Centennial UK Ltd Discovery 2006 Feature Pack 1
Not Vulnerable:

Discovery and Asset Manager Local Privilege Escalation Vulnerability

Centennial Discovery, Symantec Discovery, and Numara Asset Manager are prone to a local privilege-escalation vulnerability.

An attacker can exploit this issue to execute arbitrary code by replacing a DLL file in a directory with a malicious file of the same name. This can result in privilege escalation that may lead to a complete compromise.

Numara Asset Manager 8.0, Centennial Discovery 2006 Feature Pack 1, and Symantec Discovery 6.5 are reported affected by this issue; other versions may be vulnerable as well.

Discovery and Asset Manager Local Privilege Escalation Vulnerability

An attacker use filesystem utilities to access the affected directory and carry out this attack.

Discovery and Asset Manager Local Privilege Escalation Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Discovery and Asset Manager Local Privilege Escalation Vulnerability

References:

• Centennial Discovery Homepage (Centennial)
  
• Centennial Discovery Insecure File Permissions (Secunia)
  
• Numara Asset Manager Insecure File Permissions (Secunia)
  
• Numara Homepage (Numara)
  
• Solution ID: 8424 - Symantec Statement on Secunia Security Advisory SA25354 (Symantec)
  
• Symantec Discovery Homepage (Symantec)
  
• Symantec Discovery Insecure File Permissions (Secunia)
  
• SYM07-020 - Symantec Discovery Insecure File Permissions (Symantec)