Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

novell / file_reporter CVEs

Beta · best-effort

7 CVEs tagged to novell / file_reporter — 4 Critical, 2 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filtersBack to novell vendor archive

CVE-2012-4959

Published Nov 18, 2012

Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and execute files via a 130 /FSF/CMD request with a .. (dot dot)…

CVSS 10.0 · Critical
Vendor/product tagsBeta · best-effort

CVE-2012-4958

Published Nov 18, 2012

Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a 126 /FSF/CMD request with a .. (dot dot) in a…

CVSS 7.8 · High
Vendor/product tagsBeta · best-effort

CVE-2012-4957

Published Nov 18, 2012

Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a /FSF/CMD request with a full pathname in…

CVSS 7.8 · High
Vendor/product tagsBeta · best-effort

CVE-2012-4956

Published Nov 18, 2012

Heap-based buffer overflow in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to execute arbitrary code via a large number of VOL elements in an SRS record.

CVSS 10.0 · Critical
Vendor/product tagsBeta · best-effort

CVE-2011-2750

Published Jul 17, 2011

NFRAgent.exe in Novell File Reporter 1.0.4.2 and earlier allows remote attackers to delete arbitrary files via a full pathname in an SRS OPERATION 4 CMD 5 request to /FSF/CMD.

CVSS 5.0 · Medium
Vendor/product tagsBeta · best-effort

CVE-2011-0994

Published Apr 10, 2011

Stack-based buffer overflow in NFRAgent.exe in Novell File Reporter (NFR) before 1.0.2 allows remote attackers to execute arbitrary code via unspecified XML data.

CVSS 10.0 · Critical
Vendor/product tagsBeta · best-effort
Showing 1-7 of 7 CVEsPage 1 of 1