NA

CVE-2012-4959

Vulnerability Summary

Novell File Reporter agent XML parsing remote code execution exploit.

Exploits

Novell File Reporter agent XML parsing remote code execution exploit ...
NFRAgentexe, a component of Novell File Reporter (NFR), allows remote attackers to upload arbitrary files via a directory traversal while handling requests to /FSF/CMD with FSFUI records with UICMD 130 This Metasploit module has been tested successfully against NFR Agent 1043 (File Reporter 102) and NFR Agent 10322 (File Reporter 101) ...