CVE-2007-1173: Centennial Discovery

High severity, CVSS 10.0. EPSS: 7.8% chance of exploitation in the next 30 days.

Multiple buffer overflows in the CentennialIPTransferServer service (XFERWAN.EXE), as used by (1) Centennial Discovery 2006 Feature Pack 1, (2) Numara Asset Manager 8.0, and (3) Symantec Discovery 6.5, allow remote attackers to execute arbitrary code via long strings in a crafted TCP packet.

Affected products

• Centennial Discovery: version 2006_featurepack1 only
• Numara Asset Manager: version 8.0 only
• Symantec Discovery: version 6.5 only

Published 2007-05-16. Last modified 2026-06-16.