CVE-2007-1173
Multiple buffer overflows in the CentennialIPTransferServer service (XFERWAN.EXE), as used by (1)...
CVE-2007-1173 is a high vulnerability (CVSS 10.0) in Centennial Discovery, published May 16, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.75%, the 94th percentile. No source names a fixed version.
- Severity
- 10.0 HighCVSS 2.0, NVD
- Exploit chance
- 7.75%EPSS, 94th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Multiple buffer overflows in the CentennialIPTransferServer service (XFERWAN.EXE), as used by (1) Centennial Discovery 2006 Feature Pack 1, (2) Numara Asset Manager 8.0, and (3) Symantec Discovery 6.5, allow remote attackers to execute arbitrary code via long strings in a crafted TCP packet.
Exploit likelihood
Affected products
What each source reports
NVD Score used
Multiple buffer overflows in the CentennialIPTransferServer service (XFERWAN.EXE), as used by (1) Centennial Discovery 2006 Feature Pack 1, (2) Numara Asset Manager 8.0, and (3) Symantec Discovery 6.5, allow remote attackers to execute arbitrary code via long strings in a crafted TCP packet.
- Record
CVE-2007-1173- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
Multiple buffer overflows in the CentennialIPTransferServer service (XFERWAN.EXE), as used by (1) Centennial Discovery 2006 Feature Pack 1, (2) Numara Asset Manager 8.0, and (3) Symantec Discovery 6.5, allow remote attackers to execute arbitrary code via long strings in a crafted TCP packet.
- Record
CVE-2007-1173- Updated
- 2026-11-02
EUVDEUVD-2007-1170No score
Multiple buffer overflows in the CentennialIPTransferServer service (XFERWAN.EXE), as used by (1) Centennial Discovery 2006 Feature Pack 1, (2) Numara Asset Manager 8.0, and (3) Symantec Discovery 6.5, allow remote attackers to execute arbitrary code via long strings in a crafted TCP packet.
- Record
EUVD-2007-1170- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r6xh-7cgr-qwg3No score
Multiple buffer overflows in the CentennialIPTransferServer service (XFERWAN.EXE), as used by (1)...
Multiple buffer overflows in the CentennialIPTransferServer service (XFERWAN.EXE), as used by (1) Centennial Discovery 2006 Feature Pack 1, (2) Numara Asset Manager 8.0, and (3) Symantec Discovery 6.5, allow remote attackers to execute arbitrary code via long strings in a crafted TCP packet.
- Record
GHSA-r6xh-7cgr-qwg3- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
secunia.com/secunia_research/2007-41/advisory
vupen.com/english/advisories/2007/1834
securityfocus.com/bid/24002
securitytracker.com/id?1018072
Show 9 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/34313
osvdb.org/35076
nvd.nist.gov/vuln/detail/CVE-2007-1173
github.com/advisories/GHSA-r6xh-7cgr-qwg3