Description
Multiple buffer overflows in the CentennialIPTransferServer service (XFERWAN.EXE), as used by (1) Centennial Discovery 2006 Feature Pack 1, (2) Numara Asset Manager 8.0, and (3) Symantec Discovery 6.5, allow remote attackers to execute arbitrary code via long strings in a crafted TCP packet.
References
- http://secunia.com/secunia_research/2007-41/advisory/
- ADV-2007-1834 vdb-entry
- 24002 vdb-entry
- ADV-2007-1833 vdb-entry
- 1018072 vdb-entry
- http://secunia.com/secunia_research/2007-42/advisory/
- ADV-2007-1832 vdb-entry
- xferwan-tcp-bo(34313) vdb-entry
- http://secunia.com/secunia_research/2007-43/advisory/
- 24090 third-party-advisory
- 24329 third-party-advisory
- 35076 vdb-entry
- 24281 third-party-advisory