CVE-2007-1173

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-05-16 · updated 2026-06-16

Description

Multiple buffer overflows in the CentennialIPTransferServer service (XFERWAN.EXE), as used by (1) Centennial Discovery 2006 Feature Pack 1, (2) Numara Asset Manager 8.0, and (3) Symantec Discovery 6.5, allow remote attackers to execute arbitrary code via long strings in a crafted TCP packet.

Affected products

Centennial Discovery: 2006_featurepack1
Numara Asset Manager: 8.0
Symantec Discovery: 6.5

References

http://osvdb.org/35076
http://secunia.com/advisories/24090
http://secunia.com/advisories/24281
http://secunia.com/advisories/24329
http://secunia.com/secunia_research/2007-41/advisory/
http://secunia.com/secunia_research/2007-42/advisory/
http://secunia.com/secunia_research/2007-43/advisory/
http://www.securityfocus.com/bid/24002
http://www.securitytracker.com/id?1018072
http://www.vupen.com/english/advisories/2007/1832
http://www.vupen.com/english/advisories/2007/1833
http://www.vupen.com/english/advisories/2007/1834

Get alerted when CVE-2007-1173 or the next vulnerability affects your stack