CVE-2012-4959

Related Files

Novell File Reporter Code Execution

Posted Dec 12, 2012

Authored by Abysssec | Site abysssec.com

Novell File Reporter agent XML parsing remote code execution exploit.

tags | exploit, remote, code execution

advisories | CVE-2012-4959

SHA-256 | d97019b8d30cf82a531d15b67988c264ae384da68ddc63da71ca44d3e9fc1cd0

Download | Favorite | View

NFR Agent FSFUI Record File Upload Remote Command Execution

Posted Nov 16, 2012

Authored by juan vazquez | Site metasploit.com

NFRAgent.exe, a component of Novell File Reporter (NFR), allows remote attackers to upload arbitrary files via a directory traversal while handling requests to /FSF/CMD with FSFUI records with UICMD 130. This Metasploit module has been tested successfully against NFR Agent 1.0.4.3 (File Reporter 1.0.2) and NFR Agent 1.0.3.22 (File Reporter 1.0.1).

tags | exploit, remote, arbitrary

advisories | CVE-2012-4959

SHA-256 | 6e8968d0aa343e5878b656cc49cedf13effdc0839611e2fbdacf11ca679628df

Download | Favorite | View