CVE-2007-1173

Severity Score

10.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Multiple buffer overflows in the CentennialIPTransferServer service (XFERWAN.EXE), as used by (1) Centennial Discovery 2006 Feature Pack 1, (2) Numara Asset Manager 8.0, and (3) Symantec Discovery 6.5, allow remote attackers to execute arbitrary code via long strings in a crafted TCP packet.

Múltiples desbordamientos de búfer en el servicio CentennialIPTransferServer (XFERWAN.EXE), como el usado por (1) Centennial Discovery 2006 Feature Pack 1, (2) Numara Asset Manager 8.0, y (3) Symantec Discovery 6.5, permite a atacantes remotos ejecutar código de su elección mediante cadenas largas a paquetes TCP manipulados artesanalmente.

*Credits: N/A

CVSS Scores

NISTv2 10.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2007-02-28 CVE Reserved
2007-05-16 CVE Published
2024-04-26 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (13)

URL	Tag	Source
http://osvdb.org/35076	Vdb Entry
http://www.securityfocus.com/bid/24002	Vdb Entry
http://www.securitytracker.com/id?1018072	Vdb Entry
http://www.vupen.com/english/advisories/2007/1832	Vdb Entry
http://www.vupen.com/english/advisories/2007/1833	Vdb Entry
http://www.vupen.com/english/advisories/2007/1834	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/34313	Vdb Entry

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://secunia.com/advisories/24090	2017-07-29
http://secunia.com/advisories/24281	2017-07-29
http://secunia.com/advisories/24329	2017-07-29
http://secunia.com/secunia_research/2007-41/advisory	2017-07-29
http://secunia.com/secunia_research/2007-42/advisory	2017-07-29
http://secunia.com/secunia_research/2007-43/advisory	2017-07-29

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Centennial Search vendor "Centennial"		Discovery Search vendor "Centennial" for product "Discovery"				2006_featurepack1 Search vendor "Centennial" for product "Discovery" and version "2006_featurepack1"		-		Affected
Numara Search vendor "Numara"		Asset Manager Search vendor "Numara" for product "Asset Manager"				8.0 Search vendor "Numara" for product "Asset Manager" and version "8.0"		-		Affected
Symantec Search vendor "Symantec"		Discovery Search vendor "Symantec" for product "Discovery"				6.5 Search vendor "Symantec" for product "Discovery" and version "6.5"		-		Affected