Novell File Reporter 'NFRAgent.exe' XML Parsing Buffer Overflow Vulnerability

This host is installed with Novell File Reporter and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbnovellfilereporterbofvulnwin.nasl 8201 2017-12-20 14:28:50Z cfischer $ Novell File Reporter 'NFRAgent.exe' XML Parsing Buffer Overflow Vulnerability Authors: Antu Sana...

CVE-2011-0994

Stack-based buffer overflow in NFRAgent.exe in Novell File Reporter NFR before 1.0.2 allows remote attackers to execute arbitrary code via unspecified XML data...

Stack overflow

Stack-based buffer overflow in NFRAgent.exe in Novell File Reporter NFR before 1.0.2 allows remote attackers to execute arbitrary code via unspecified XML data...

DSquare Exploit Pack: D2SEC_NFRAGENT

Name| d2secnfragent ---|--- CVE| CVE-2011-0994 Exploit Pack| D2ExploitPack Description| Novell File Reporter Agent Stack Overflow Vulnerability Notes|...

CVE-2011-0994

Stack-based buffer overflow in NFRAgent.exe in Novell File Reporter NFR before 1.0.2 allows remote attackers to execute arbitrary code via unspecified XML data...

CVE-2011-0994

The CVE-2011-0994 issue affects the Novell File Reporter Agent (NFRAgent.exe). It is a stack/buffer overflow caused by improper boundary handling while parsing XML data, enabling a remote attacker to potentially execute arbitrary code on vulnerable Windows hosts. Public sources consistently refer...

Novell File Reporter Agent XML解析缓冲区溢出漏洞

CVE ID: CVE-2011-0994 Novell File Reporter可提供现有文件信息、最后访问数据时间，文件的副本信息及文件位置等网络服务器上存储的无数文件信息并可规划存储空间。 Novell File Reporter在实现上存在安全漏洞，攻击者可利用此漏洞以系统级别的权限执行任意代码，控制受影响系统。 此漏洞源于在处理某些XML标签的内容时File Reporter Agent NFRAgent.exe中的边界错误，可通过发送到TCP端口3037的特制数据造成栈缓冲区溢出。 Novell File Reporter 1.x 厂商补丁： Novell ------...

Novell File Reporter Agent buffer overflow

NFRAgent.exe TCP/3037 buffer overflow...

Novell File Reporter Agent XML Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell File Reporter Agent. Authentication is not required to exploit this vulnerability. The flaw exists within the NFRAgent.exe component which listens by default on TCP port 3037. When handling...