Lucene search

K
cve[email protected]CVE-2012-4958
HistoryNov 18, 2012 - 7:55 p.m.

CVE-2012-4958

2012-11-1819:55:00
CWE-22
web.nvd.nist.gov
21
cve-2012-4958
directory traversal
nfragent.exe
novell file reporter
remote attackers
arbitrary files

6.8 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.948 High

EPSS

Percentile

99.3%

Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a 126 /FSF/CMD request with a … (dot dot) in a FILE element of an FSFUI record.

6.8 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.948 High

EPSS

Percentile

99.3%