Novell File Reporter Engine 'RECORD' Processing Buffer Overflow Vulnerability

This host is installed with Novell File Reporter engine and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbnovellfilereporterenginebofvulnwin.nasl 7044 2017-09-01 11:50:59Z teissa $ Novell File Reporter Engine 'RECORD' Processing Buffer Overflow Vulnerability Authors...

CVE-2011-2220

Stack-based buffer overflow in NFREngine.exe in Novell File Reporter Engine before 1.0.2.53, as used in Novell File Reporter and other products, allows remote attackers to execute arbitrary code via a crafted RECORD element...

CVE-2011-2220

The CVE-2011-2220 entry applies to Novell File Reporter Engine’s NFREngine.exe, with the vulnerability present in versions before 1.0.2.53. The issue is a stack-based buffer overflow while parsing the element, allowing remote attackers to execute arbitrary code via crafted data over the network....

CVE-2011-2220

Stack-based buffer overflow in NFREngine.exe in Novell File Reporter Engine before 1.0.2.53, as used in Novell File Reporter and other products, allows remote attackers to execute arbitrary code via a crafted RECORD element...

CVE-2011-2220: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in NFREngine.exe in Novell File Reporter Engine before 1.0.2.53, as used in Novell File Reporter and other products, allows remote attackers to execute arbitrary code via a crafted RECORD element...

Novell File Reporter Engine RECORD Tag Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell File Reporter Engine. Authentication is not required to exploit this vulnerability. The specific flaw exists within NFREngine.exe which communicates with the Agent component over HTTPS on TC...