Lucene search

K
cve[email protected]CVE-2007-1173
HistoryMay 16, 2007 - 10:30 p.m.

CVE-2007-1173

2007-05-1622:30:00
NVD-CWE-Other
web.nvd.nist.gov
24
cve-2007-1173
centennialiptransferserver
xferwan.exe
buffer overflow
remote code execution
centennial discovery 2006 feature pack 1
numara asset manager 8.0
symantec discovery 6.5
tcp packet

7.9 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.833 High

EPSS

Percentile

98.4%

Multiple buffer overflows in the CentennialIPTransferServer service (XFERWAN.EXE), as used by (1) Centennial Discovery 2006 Feature Pack 1, (2) Numara Asset Manager 8.0, and (3) Symantec Discovery 6.5, allow remote attackers to execute arbitrary code via long strings in a crafted TCP packet.

7.9 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.833 High

EPSS

Percentile

98.4%

Related for CVE-2007-1173