CVE-2007-2514

Centennial Discovery - Stack-Based Buffer Overflow via Long Request

Title source: llm

Description

Stack-based buffer overflow in XferWan.exe as used in multiple products including (1) Symantec Discovery 6.5, (2) Numara Asset Manager 8.0, and (3) Centennial UK Ltd Discovery 2006 Feature Pack, allows remote attackers to execute arbitrary code via a long request. NOTE: this might be a reservation duplicate of CVE-2007-1173.

References (7)

Core 7

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1018191

Patch x_refsource_misc

http://dvlabs.tippingpoint.com/advisory/TPTI-07-10

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/34723

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/470563/100/0/threaded

Patch vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/24317

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/42059

Third Party Advisory third-party-advisory x_refsource_sreason

http://securityreason.com/securityalert/2785

Scores

EPSS 0.1203

EPSS Percentile 93.9%

Details

Status published

Products (3)

centennial/discovery 2006_featurepack1

numara/asset_manager 8.0

symantec/discovery 6.5

Published Jun 06, 2007

Tracked Since Feb 18, 2026