CVE-2007-1173
Multiple buffer overflows in the CentennialIPTransferServer service (XFERWAN.EXE), as used by (1)...
Multiple buffer overflows in the CentennialIPTransferServer service (XFERWAN.EXE), as used by (1) Centennial Discovery 2006 Feature Pack 1, (2) Numara Asset Manager 8.0, and (3) Symantec Discovery 6.5, allow remote attackers to execute arbitrary code via long strings in a crafted TCP packet.
Exploit likelihood
What each source reports
NVD Score used
Multiple buffer overflows in the CentennialIPTransferServer service (XFERWAN.EXE), as used by (1) Centennial Discovery 2006 Feature Pack 1, (2) Numara Asset Manager 8.0, and (3) Symantec Discovery 6.5, allow remote attackers to execute arbitrary code via long strings in a crafted TCP packet.
- Record
CVE-2007-1173- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in the CentennialIPTransferServer service (XFERWAN.EXE), as used by (1) Centennial Discovery 2006 Feature Pack 1, (2) Numara Asset Manager 8.0, and (3) Symantec Discovery 6.5, allow remote attackers to execute arbitrary code via long strings in a crafted TCP packet.
- Record
CVE-2007-1173- Updated
- 2026-11-02
EUVDEUVD-2007-1170 No score
Multiple buffer overflows in the CentennialIPTransferServer service (XFERWAN.EXE), as used by (1) Centennial Discovery 2006 Feature Pack 1, (2) Numara Asset Manager 8.0, and (3) Symantec Discovery 6.5, allow remote attackers to execute arbitrary code via long strings in a crafted TCP packet.
- Record
EUVD-2007-1170- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r6xh-7cgr-qwg3 No score
Multiple buffer overflows in the CentennialIPTransferServer service (XFERWAN.EXE), as used by (1)...
Multiple buffer overflows in the CentennialIPTransferServer service (XFERWAN.EXE), as used by (1) Centennial Discovery 2006 Feature Pack 1, (2) Numara Asset Manager 8.0, and (3) Symantec Discovery 6.5, allow remote attackers to execute arbitrary code via long strings in a crafted TCP packet.
- Record
GHSA-r6xh-7cgr-qwg3- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-1173 is a high vulnerability (CVSS 10.0) in Centennial Discovery, published May 16, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.75%, the 94th percentile. No source names a fixed version.
References
secunia.com/secunia_research/2007-41/advisory
vupen.com/english/advisories/2007/1834
securityfocus.com/bid/24002
securitytracker.com/id?1018072
Show 9 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/34313
osvdb.org/35076
nvd.nist.gov/vuln/detail/CVE-2007-1173
github.com/advisories/GHSA-r6xh-7cgr-qwg3