Novell File Reporter Agent XML Parsing Remote Code Execution

Exploit for windows platform in category remote exploits Novell File Reporter Agent XML Parsing Remote Code Execution Vulnerability 0day CVE-2012-4959 @abysssec well just one more of our 0day got published after 2 year here is info :...

Novell File Reporter 'NFRAgent.exe' Multiple Security Vulnerabilities

Novell File Reporter is prone to the following security vulnerabilities: 1. A heap-based buffer-overflow vulnerability 2. Multiple arbitrary file-download vulnerabilities 3. An arbitrary file-upload vulnerability SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted...

Novell File Reporter (NFR) Agent - XML Parsing Remote Code Execution

Novell File Reporter NFR Agent - XML Parsing Remote Code Execution wwww.abysssec.com Novell File Reporter Agent XML Parsing Remote Code Execution Vulnerability 0day CVE-2012-4959 @abysssec well just one more of our 0day got published after 2 year here is info :...

Novell File Reporter (NFR) Agent - XML Parsing Remote Code Execution

wwww.abysssec.com Novell File Reporter Agent XML Parsing Remote Code Execution Vulnerability 0day CVE-2012-4959 @abysssec well just one more of our 0day got published after 2 year here is info :...

Novell File Reporter FSFUI File Upload (CVE-2012-4959)

A file upload vulnerability has been reported in Novell File Reporter. The vulnerability is due to lack of authorization on certain requests. A remote attacker can exploit this issue by sending a specially crafted request to the target. Successful exploitation could result in arbitrary files bein...

Novell File Reporter Agent FSFUI UICMD 126 Arbitrary File Download

The version of Novell File Reporter Agent running on the remote host has an arbitrary file download vulnerability. Making a specially crafted POST request to /FSF/CMD for records with a name of FSFUI and UICMD of 126 could result in arbitrary files being downloaded. A remote, unauthenticated...

Novell File Reporter (NFR) Agent FSFUI Record - Arbitrary File Upload / Remote Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'NFR Agent FSFUI Record File Upload...

CVE-2012-4956

Heap-based buffer overflow in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to execute arbitrary code via a large number of VOL elements in an SRS record...

CVE-2012-4959

Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and execute files via a 130 /FSF/CMD request with a .. dot dot in a FILE element of an FSFUI record...

Directory traversal

Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a 126 /FSF/CMD request with a .. dot dot in a FILE element of an FSFUI record...

Heap overflow

Heap-based buffer overflow in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to execute arbitrary code via a large number of VOL elements in an SRS record...

Path traversal

Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a /FSF/CMD request with a full pathname in a PATH element of an SRS record...

Directory traversal

Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and execute files via a 130 /FSF/CMD request with a .. dot dot in a FILE element of an FSFUI record...

CVE-2012-4957

Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a /FSF/CMD request with a full pathname in a PATH element of an SRS record...

CVE-2012-4956

CVE-2012-4956 affects Novell File Reporter 1.0.2; NFRAgent.exe suffers a heap-based buffer overflow triggered by a large number of VOL elements in an SRS record, enabling remote code execution. Public references in connected documents confirm related exploit activity: CIRCL sightings point to a M...

CVE-2012-4958

CVE-2012-4958: In Novell File Reporter NFRAgent.exe 1.0.2, a directory traversal allows remote attackers to read arbitrary files by sending a crafted FSF/CMD request containing .. in a FILE element of an FSFUI record. This is described as a lack of proper authorization on certain FSF/CMD requests...

CVE-2012-4957

CVE-2012-4957 describes an absolute path traversal vulnerability in NFRAgent.exe of Novell File Reporter 1.0.2 . A remote attacker can read arbitrary files by sending a crafted request to the /FSF/CMD endpoint with a full pathname in a PATH element of an SRS record. Public references (Exploit-DB ...

CVE-2012-4958

Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a 126 /FSF/CMD request with a .. dot dot in a FILE element of an FSFUI record...

CVE-2012-4959

Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and execute files via a 130 /FSF/CMD request with a .. dot dot in a FILE element of an FSFUI record...

CVE-2012-4956

Heap-based buffer overflow in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to execute arbitrary code via a large number of VOL elements in an SRS record...