Vulnerability CVE-2007-1173
Published: 2007-05-16   Modified: 2012-02-12

Description:
Multiple buffer overflows in the CentennialIPTransferServer service (XFERWAN.EXE), as used by (1) Centennial Discovery 2006 Feature Pack 1, (2) Numara Asset Manager 8.0, and (3) Symantec Discovery 6.5, allow remote attackers to execute arbitrary code via long strings in a crafted TCP packet.

CVSS2 => (AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
10/10
10/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Symantec -> Discovery 
Numara -> Asset manager 
Centennial -> Discovery 

 References:
http://xforce.iss.net/xforce/xfdb/34313
http://www.vupen.com/english/advisories/2007/1834
http://www.vupen.com/english/advisories/2007/1833
http://www.vupen.com/english/advisories/2007/1832
http://www.securitytracker.com/id?1018072
http://www.securityfocus.com/bid/24002
http://secunia.com/secunia_research/2007-43/advisory/
http://secunia.com/secunia_research/2007-42/advisory/
http://secunia.com/secunia_research/2007-41/advisory/
http://secunia.com/advisories/24329
http://secunia.com/advisories/24281
http://secunia.com/advisories/24090
http://osvdb.org/35076
Copyright 2024, cxsecurity.com

 

Back to Top