CVE-2012-4957

published 2012-11-18

CVE-2012-4957: Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a /FSF/CMD request with…

high 7.8 CVSS 3.1

AV N AC L Au N C C I N A N

EXPLOIT

Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a /FSF/CMD request with a full pathname in a PATH element of an SRS record.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
novell	file_reporter	—	—

CWE-22