Lucene search

K
cve[email protected]CVE-2012-4957
HistoryNov 18, 2012 - 7:55 p.m.

CVE-2012-4957

2012-11-1819:55:00
CWE-22
web.nvd.nist.gov
37
nfragent.exe
novell file reporter
path traversal vulnerability
remote attackers
arbitrary files
srs record

6.8 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.954 High

EPSS

Percentile

99.4%

Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a /FSF/CMD request with a full pathname in a PATH element of an SRS record.

6.8 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.954 High

EPSS

Percentile

99.4%