Novell File Reporter vulnerabilities
6 vulnerabilities
Known vulnerabilities in Novell File Reporter, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2012-4958novellfile_reporter
EPSS score73.51%
Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a 126 /FSF/CMD request with a .. (dot dot) in a FILE element of an FSFUI record.CVE-2012-4959novellfile_reporterEPSS score71.19%
Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and execute files via a 130 /FSF/CMD request with a .. (dot dot) in a FILE element of an FSFUI record.CVE-2012-4956novellfile_reporterEPSS score37.72%
Heap-based buffer overflow in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to execute arbitrary code via a large number of VOL elements in an SRS record.CVE-2012-4957novellfile_reporterEPSS score67.62%
Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a /FSF/CMD request with a full pathname in a PATH element of an SRS record.CVE-2011-2750novellfile_reporterEPSS score16.68%
NFRAgent.exe in Novell File Reporter 1.0.4.2 and earlier allows remote attackers to delete arbitrary files via a full pathname in an SRS OPERATION 4 CMD 5 request to /FSF/CMD.CVE-2011-0994novellfile_reporterEPSS score17.94%
Stack-based buffer overflow in NFRAgent.exe in Novell File Reporter (NFR) before 1.0.2 allows remote attackers to execute arbitrary code via unspecified XML data.