Multiple buffer overflows in the CentennialIPTransferServer service (XFERWAN.EXE), as used by (1) Centennial Discovery 2006 Feature Pack 1, (2) Numara Asset Manager 8.0, and (3) Symantec Discovery 6.5, allow remote attackers to execute arbitrary code via long strings in a crafted TCP packet.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://secunia.com/secunia_research/2007-41/advisory/ | x_refsource_MISC |
| http://www.vupen.com/english/advisories/2007/1834 | vdb-entry x_refsource_VUPEN |
| http://www.securityfocus.com/bid/24002 | vdb-entry x_refsource_BID |
| http://www.vupen.com/english/advisories/2007/1833 | vdb-entry x_refsource_VUPEN |
| http://www.securitytracker.com/id?1018072 | vdb-entry x_refsource_SECTRACK |
| http://secunia.com/secunia_research/2007-42/advisory/ | x_refsource_MISC |
| http://www.vupen.com/english/advisories/2007/1832 | vdb-entry x_refsource_VUPEN |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/34313 | vdb-entry x_refsource_XF |
| http://secunia.com/secunia_research/2007-43/advisory/ | x_refsource_MISC |
| http://secunia.com/advisories/24090 | third-party-advisory x_refsource_SECUNIA |
| http://secunia.com/advisories/24329 | third-party-advisory x_refsource_SECUNIA |
| http://osvdb.org/35076 | vdb-entry x_refsource_OSVDB |
| http://secunia.com/advisories/24281 | third-party-advisory x_refsource_SECUNIA |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|