vulnwire
10.0crit

CVE-2007-1173

Multiple buffer overflows in the CentennialIPTransferServer service (XFERWAN.EXE), as used by (1) Centennial Discovery 2006 Feature Pack 1,…

Published 19 y ago · modified 4 mo ago · JSON

CVSS
10.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
7.8%
percentile 95%
Public exploits
0
none known

Multiple buffer overflows in the CentennialIPTransferServer service (XFERWAN.EXE), as used by (1) Centennial Discovery 2006 Feature Pack 1, (2) Numara Asset Manager 8.0, and (3) Symantec Discovery 6.5, allow remote attackers to execute arbitrary code via long strings in a crafted TCP packet.

Exploit prediction (EPSS)

7.75% probability of exploitation in the next 30 days, higher than 95% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.010.0AV:N/AC:L/Au:N/C:C/I:C/A:C

References

  • secunia.com /secunia_research/2007-41/advisory/ · x_refsource_MISC, x_transferred
  • vupen.com /english/advisories/2007/1834 · vdb-entry, x_refsource_VUPEN, x_transferred
  • securityfocus.com /bid/24002 · vdb-entry, x_refsource_BID, x_transferred
  • vupen.com /english/advisories/2007/1833 · vdb-entry, x_refsource_VUPEN, x_transferred
  • securitytracker.com /id?1018072 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • secunia.com /secunia_research/2007-42/advisory/ · x_refsource_MISC, x_transferred
  • vupen.com /english/advisories/2007/1832 · vdb-entry, x_refsource_VUPEN, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/34313 · vdb-entry, x_refsource_XF, x_transferred
  • secunia.com /secunia_research/2007-43/advisory/ · x_refsource_MISC, x_transferred
  • secunia.com /advisories/24090 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/24329 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • osvdb.org /35076 · vdb-entry, x_refsource_OSVDB, x_transferred
  • secunia.com /advisories/24281 · third-party-advisory, x_refsource_SECUNIA, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.