CVE-2012-4958

published 2012-11-18

CVE-2012-4958: Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a 126 /FSF/CMD request with…

high 7.8 CVSS 3.1

AV N AC L Au N C C I N A N

EXPLOIT

Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a 126 /FSF/CMD request with a .. (dot dot) in a FILE element of an FSFUI record.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
novell	file_reporter	—	—

CWE-22