Multiple buffer overflows in the CentennialIPTransferServer service (XFERWAN.EXE) as used by (1) Centennial Discovery 2006 Feature Pack 1 (2) Numara Asset Manager 8.0 and (3) Symantec Discovery 6.5 allow remote attackers to execute arbitrary code via long strings in a crafted TCP packet.