Novell File Reporter 'NFRAgent.exe' Multiple Security Vulnerabilities

Novell File Reporter is prone to the following security vulnerabilities: 1. A heap-based buffer-overflow vulnerability 2. Multiple arbitrary file-download vulnerabilities 3. An arbitrary file-upload vulnerability SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted...

CVE-2012-4957

Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a /FSF/CMD request with a full pathname in a PATH element of an SRS record...

CVE-2012-4956

Heap-based buffer overflow in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to execute arbitrary code via a large number of VOL elements in an SRS record...

CVE-2012-4958

Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a 126 /FSF/CMD request with a .. dot dot in a FILE element of an FSFUI record...

Directory traversal

Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a 126 /FSF/CMD request with a .. dot dot in a FILE element of an FSFUI record...

Heap overflow

Heap-based buffer overflow in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to execute arbitrary code via a large number of VOL elements in an SRS record...

CVE-2012-4959

Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and execute files via a 130 /FSF/CMD request with a .. dot dot in a FILE element of an FSFUI record...

CVE-2012-4956

CVE-2012-4956 affects Novell File Reporter 1.0.2; NFRAgent.exe suffers a heap-based buffer overflow triggered by a large number of VOL elements in an SRS record, enabling remote code execution. Public references in connected documents confirm related exploit activity: CIRCL sightings point to a M...

CVE-2012-4959

CVE-2012-4959 affects Novell File Reporter NFRAgent.exe (1.0.2) via directory traversal in FSF/CMD handling of FSFUI records (UICMD 130), enabling remote upload and execution of arbitrary files. Connected data corroborates exploitation in Metasploit modules for NFR Agent 1.0.3/1.0.4.x and public ...

CVE-2012-4957

Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a /FSF/CMD request with a full pathname in a PATH element of an SRS record...

CVE-2012-4958

CVE-2012-4958: In Novell File Reporter NFRAgent.exe 1.0.2, a directory traversal allows remote attackers to read arbitrary files by sending a crafted FSF/CMD request containing .. in a FILE element of an FSFUI record. This is described as a lack of proper authorization on certain FSF/CMD requests...

CVE-2012-4957

CVE-2012-4957 describes an absolute path traversal vulnerability in NFRAgent.exe of Novell File Reporter 1.0.2 . A remote attacker can read arbitrary files by sending a crafted request to the /FSF/CMD endpoint with a full pathname in a PATH element of an SRS record. Public references (Exploit-DB ...

NFR Agent Heap Overflow Vulnerability

This module exploits a heap overflow in NFRAgent.exe, a component of Novell File Reporter NFR. The vulnerability occurs when handling requests of name "SRS", where NFRAgent.exe fails to generate a response in a secure way, copying user controlled data into a fixed-length buffer in the heap withou...

(0Day) Novell File Reporter NFRAgent.exe VOL Tag Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell File Reporter Agent. Authentication is not required to exploit this vulnerability. The specific flaw exists within NFRAgent.exe which communicates with the Agent component over HTTPS on TCP...

CVE-2011-2750

NFRAgent.exe in Novell File Reporter 1.0.4.2 and earlier allows remote attackers to delete arbitrary files via a full pathname in an SRS OPERATION 4 CMD 5 request to /FSF/CMD...

Design/Logic Flaw

NFRAgent.exe in Novell File Reporter 1.0.4.2 and earlier allows remote attackers to delete arbitrary files via a full pathname in an SRS OPERATION 4 CMD 5 request to /FSF/CMD...

CVE-2011-2750

NFRAgent.exe in Novell File Reporter 1.0.4.2 and earlier allows remote attackers to delete arbitrary files via a full pathname in an SRS OPERATION 4 CMD 5 request to /FSF/CMD...

CVE-2011-2750

CVE-2011-2750 affects Novell File Reporter NFRAgent.exe; prior versions up to 1.0.4.2 (and earlier) allow remote deletion of arbitrary files via a full pathname in an SRS request (OPERATION 4, CMD 5 to /FSF/CMD). Public material confirms PoC/exploit code (Metasploit module) and reports of an arbi...

Novell File Reporter 'NFRAgent.exe' XML Parsing Buffer Overflow Vulnerability

This host is installed with Novell File Reporter and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbnovellfilereporterbofvulnwin.nasl 8201 2017-12-20 14:28:50Z cfischer $ Novell File Reporter 'NFRAgent.exe' XML Parsing Buffer Overflow Vulnerability Authors: Antu Sana...

Stack overflow

Stack-based buffer overflow in NFRAgent.exe in Novell File Reporter NFR before 1.0.2 allows remote attackers to execute arbitrary code via unspecified XML data...