CVE-2012-4959

CVE-2012-4959 affects Novell File Reporter NFRAgent.exe (1.0.2) via directory traversal in FSF/CMD handling of FSFUI records (UICMD 130), enabling remote upload and execution of arbitrary files. Connected data corroborates exploitation in Metasploit modules for NFR Agent 1.0.3/1.0.4.x and public ...

CVE-2012-4957

CVE-2012-4957 describes an absolute path traversal vulnerability in NFRAgent.exe of Novell File Reporter 1.0.2 . A remote attacker can read arbitrary files by sending a crafted request to the /FSF/CMD endpoint with a full pathname in a PATH element of an SRS record. Public references (Exploit-DB ...

CVE-2012-4958

CVE-2012-4958: In Novell File Reporter NFRAgent.exe 1.0.2, a directory traversal allows remote attackers to read arbitrary files by sending a crafted FSF/CMD request containing .. in a FILE element of an FSFUI record. This is described as a lack of proper authorization on certain FSF/CMD requests...

CVE-2011-0994

The CVE-2011-0994 issue affects the Novell File Reporter Agent (NFRAgent.exe). It is a stack/buffer overflow caused by improper boundary handling while parsing XML data, enabling a remote attacker to potentially execute arbitrary code on vulnerable Windows hosts. Public sources consistently refer...

CVE-2012-4956

CVE-2012-4956 affects Novell File Reporter 1.0.2; NFRAgent.exe suffers a heap-based buffer overflow triggered by a large number of VOL elements in an SRS record, enabling remote code execution. Public references in connected documents confirm related exploit activity: CIRCL sightings point to a M...

CVE-2011-2220

The CVE-2011-2220 entry applies to Novell File Reporter Engine’s NFREngine.exe, with the vulnerability present in versions before 1.0.2.53. The issue is a stack-based buffer overflow while parsing the element, allowing remote attackers to execute arbitrary code via crafted data over the network....

CVE-2011-2750

CVE-2011-2750 affects Novell File Reporter NFRAgent.exe; prior versions up to 1.0.4.2 (and earlier) allow remote deletion of arbitrary files via a full pathname in an SRS request (OPERATION 4, CMD 5 to /FSF/CMD). Public material confirms PoC/exploit code (Metasploit module) and reports of an arbi...