Novell File Reporter Engine 'RECORD' Processing Buffer Overflow Vulnerability

This host is installed with Novell File Reporter engine and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbnovellfilereporterenginebofvulnwin.nasl 7044 2017-09-01 11:50:59Z teissa $ Novell File Reporter Engine 'RECORD' Processing Buffer Overflow Vulnerability Authors...

CVE-2011-2220

Stack-based buffer overflow in NFREngine.exe in Novell File Reporter Engine before 1.0.2.53, as used in Novell File Reporter and other products, allows remote attackers to execute arbitrary code via a crafted RECORD element...

Stack overflow

Stack-based buffer overflow in NFREngine.exe in Novell File Reporter Engine before 1.0.2.53, as used in Novell File Reporter and other products, allows remote attackers to execute arbitrary code via a crafted RECORD element...

CVE-2011-2220

Stack-based buffer overflow in NFREngine.exe in Novell File Reporter Engine before 1.0.2.53, as used in Novell File Reporter and other products, allows remote attackers to execute arbitrary code via a crafted RECORD element...

CVE-2011-2220: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in NFREngine.exe in Novell File Reporter Engine before 1.0.2.53, as used in Novell File Reporter and other products, allows remote attackers to execute arbitrary code via a crafted RECORD element...

Novell File Reporter Engine RECORD Element Tag Parsing Overflow (credentialed check)

The version of Novell File Reporter NFR Engine installed on the remote Windows host is earlier than 1.0.2.53. As such, it reportedly has a flaw in its handling of HTTP requests to the TCP port used to communicate with the NFR Agent, normally 3035. Specifically, the application fails to check the...

PT-2011-3690

Name of the Vulnerable Software and Affected Versions Novell File Reporter Engine versions prior to 1.0.2.53 Description The issue is related to a stack-based buffer overflow in NFREngine.exe, which can be exploited by remote attackers to execute arbitrary code. This is achieved by sending a...