CVE-2007-2950
Centennial Discovery 2006 Feature Pack 1, which is used by (1) Numara Asset Manager 8.0 and (2)...
Centennial Discovery 2006 Feature Pack 1, which is used by (1) Numara Asset Manager 8.0 and (2) Symantec Discovery 6.5, uses insecure permissions on certain directories, which allows local users to gain privileges.
Exploit likelihood
What each source reports
NVD Score used
7.2
Centennial Discovery 2006 Feature Pack 1, which is used by (1) Numara Asset Manager 8.0 and (2) Symantec Discovery 6.5, uses insecure permissions on certain directories, which allows local users to gain privileges.
- Record
CVE-2007-2950- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Centennial Discovery 2006 Feature Pack 1, which is used by (1) Numara Asset Manager 8.0 and (2) Symantec Discovery 6.5, uses insecure permissions on certain directories, which allows local users to gain privileges.
- Record
CVE-2007-2950- Updated
- 2026-11-02
EUVDEUVD-2007-2942 No score
Centennial Discovery 2006 Feature Pack 1, which is used by (1) Numara Asset Manager 8.0 and (2) Symantec Discovery 6.5, uses insecure permissions on certain directories, which allows local users to gain privileges.
- Record
EUVD-2007-2942- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5hhv-2pjm-ghc2 No score
Centennial Discovery 2006 Feature Pack 1, which is used by (1) Numara Asset Manager 8.0 and (2)...
Centennial Discovery 2006 Feature Pack 1, which is used by (1) Numara Asset Manager 8.0 and (2) Symantec Discovery 6.5, uses insecure permissions on certain directories, which allows local users to gain privileges.
- Record
GHSA-5hhv-2pjm-ghc2- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2950 is a high vulnerability (CVSS 7.2) in Centennial Discovery, published July 23, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. No source names a fixed version.
References
secunia.com/secunia_research/2007-59/advisory
exchange.xforce.ibmcloud.com/vulnerabilities/35564
securityfocus.com/bid/25000
vupen.com/english/advisories/2007/2603
exchange.xforce.ibmcloud.com/vulnerabilities/35563
vupen.com/english/advisories/2007/2600
Show 9 moreShow less
secunia.com/advisories/25354
secunia.com/secunia_research/2007-58/advisory
vupen.com/english/advisories/2007/2599
secunia.com/advisories/25374
secunia.com/advisories/25379
exchange.xforce.ibmcloud.com/vulnerabilities/35562
secunia.com/secunia_research/2007-60/advisory
nvd.nist.gov/vuln/detail/CVE-2007-2950
github.com/advisories/GHSA-5hhv-2pjm-ghc2