CVE-2007-1173

KRITISCH 10.0CVE-2007-1173 · Published 16/05/2007 · updated 16/06/2026

Kurz gesagt

CVE-2007-1173 ist eine Schwachstelle (KRITISCH (CVSS 10.0)) in discovery (centennial), asset manager (numara), discovery (symantec).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 7.8%, höher als bei 94.6% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
discovery centennial	`= 2006_featurepack1`	No fix yet
asset manager numara	`= 8.0`	No fix yet
discovery symantec	`= 6.5`	No fix yet

Description

Multiple buffer overflows in the CentennialIPTransferServer service (XFERWAN.EXE), as used by (1) Centennial Discovery 2006 Feature Pack 1, (2) Numara Asset Manager 8.0, and (3) Symantec Discovery 6.5, allow remote attackers to execute arbitrary code via long strings in a crafted TCP packet.

References

osvdb.org/35076
secunia.com/advisories/24090 · Vendor Advisory
secunia.com/advisories/24281 · Vendor Advisory
secunia.com/advisories/24329 · Vendor Advisory
secunia.com/secunia_research/2007-41/advisory · Vendor Advisory
secunia.com/secunia_research/2007-42/advisory · Vendor Advisory
secunia.com/secunia_research/2007-43/advisory · Vendor Advisory
securityfocus.com/bid/24002
securitytracker.com/id
vupen.com/english/advisories/2007/1832
vupen.com/english/advisories/2007/1833
vupen.com/english/advisories/2007/1834
exchange.xforce.ibmcloud.com/vulnerabilities/34313

Weitere Schwachstellen in discovery

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free