CVE-2012-4959

CVE-2012-4959 affects Novell File Reporter NFRAgent.exe (1.0.2) via directory traversal in FSF/CMD handling of FSFUI records (UICMD 130), enabling remote upload and execution of arbitrary files. Connected data corroborates exploitation in Metasploit modules for NFR Agent 1.0.3/1.0.4.x and public ...

PT-2012-5690

Name of the Vulnerable Software and Affected Versions Novell File Reporter version 1.0.2 Description The issue allows remote attackers to read arbitrary files due to an absolute path traversal vulnerability in NFRAgent.exe. This can be exploited via a /FSF/CMD request with a full pathname in a PA...

PT-2011-4060

Name of the Vulnerable Software and Affected Versions Novell File Reporter versions 1.0.4.2 and earlier Description The issue allows remote attackers to delete arbitrary files by sending a full pathname in an SRS OPERATION 4 CMD 5 request to the "/FSF/CMD" API endpoint. Recommendations For Novell...