CVE-2007-1173 Multiple buffer overflows in the CentennialIPTransferServer service (XFERWAN.EXE), as used by (1) Centennial Discovery 2006 Feature Pack 1, (2) Numara Asset Manager 8.0, and (3) Symantec Discovery 6.5...
HighCVSS 10.0
EPSS 7.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in the CentennialIPTransferServer service (XFERWAN.EXE), as used by (1) Centennial Discovery 2006 Feature Pack 1, (2) Numara Asset Manager 8.0, and (3) Symantec Discovery 6.5, allow remote attackers to execute arbitrary code via long strings in a crafted TCP packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| centennial discovery | = 2006_featurepack1 | No fix listed |
| numara asset manager | = 8.0 | No fix listed |
| symantec discovery | = 6.5 | No fix listed |
References
- 35076 vdb-entry
- 24090 third-party-advisory vendor-advisory
- 24281 third-party-advisory vendor-advisory
- 24329 third-party-advisory vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- 24002 vdb-entry
- 1018072 vdb-entry
- ADV-2007-1832 vdb-entry
- ADV-2007-1833 vdb-entry
- ADV-2007-1834 vdb-entry
- xferwan-tcp-bo(34313) vdb-entry