NFR Agent SRS Record Arbitrary Remote File Access

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'NFR Agent SRS Record Arbitrary Remote File Access', 'Description' = %q NFRAgent.exe, a component of Novell File Reporter NFR, allows remote...

CVE-2012-4956

Heap-based buffer overflow in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to execute arbitrary code via a large number of VOL elements in an SRS record...

CVE-2012-4957

Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a /FSF/CMD request with a full pathname in a PATH element of an SRS record...

Path traversal

Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a /FSF/CMD request with a full pathname in a PATH element of an SRS record...

Heap overflow

Heap-based buffer overflow in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to execute arbitrary code via a large number of VOL elements in an SRS record...

CVE-2012-4957

CVE-2012-4957 describes an absolute path traversal vulnerability in NFRAgent.exe of Novell File Reporter 1.0.2 . A remote attacker can read arbitrary files by sending a crafted request to the /FSF/CMD endpoint with a full pathname in a PATH element of an SRS record. Public references (Exploit-DB ...

CVE-2012-4956

Heap-based buffer overflow in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to execute arbitrary code via a large number of VOL elements in an SRS record...

CVE-2012-4957: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a /FSF/CMD request with a full pathname in a PATH element of an SRS record...

CVE-2012-4956: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to execute arbitrary code via a large number of VOL elements in an SRS record...

PT-2012-5689

Name of the Vulnerable Software and Affected Versions Novell File Reporter version 1.0.2 Description A heap-based buffer overflow issue exists, allowing remote attackers to execute arbitrary code by sending a large number of VOL elements in an SRS record. Recommendations For Novell File Reporter...

PT-2012-5690

Name of the Vulnerable Software and Affected Versions Novell File Reporter version 1.0.2 Description The issue allows remote attackers to read arbitrary files due to an absolute path traversal vulnerability in NFRAgent.exe. This can be exploited via a /FSF/CMD request with a full pathname in a PA...