GCVE - cpe:2.3:a:novell:file_reporter:1.0.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:novell:file_reporter:1.0.2:*:*:*:*:*:*:*

part: a version: 1.0.2 update: *

Vendor	Novell (`4a1c187d-e568-531f-92b0-685a3df2807c`)
Product	File Reporter (`17155eb8-2716-5e31-9b71-9b6be62a428c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-4959`	vulnerable	2026-06-08 05:02:53.381443	Details available Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and execute files via a 130 /FSF/CMD request with a .. (dot dot) in a FILE element of an FSFUI record. Published: 2012-11-18T19:00:00.000Z Updated: 2024-09-16T20:43:13.860Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/273371 https://community.rapid7.com/community/metasploit/blog/2012/11/16/nfr-agent-buffer-vulnerabilites-cve-2012-4959	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4958`	vulnerable	2026-06-08 05:02:53.381163	Details available Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a 126 /FSF/CMD request with a .. (dot dot) in a FILE element of an FSFUI record. Published: 2012-11-18T19:00:00.000Z Updated: 2024-09-17T03:54:24.563Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/273371 https://community.rapid7.com/community/metasploit/blog/2012/11/16/nfr-agent-buffer-vulnerabilites-cve-2012-4959	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4957`	vulnerable	2026-06-08 05:02:53.380854	Details available Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a /FSF/CMD request with a full pathname in a PATH element of an SRS record. Published: 2012-11-18T19:00:00.000Z Updated: 2024-09-17T04:24:22.565Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/273371 https://community.rapid7.com/community/metasploit/blog/2012/11/16/nfr-agent-buffer-vulnerabilites-cve-2012-4959	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4956`	vulnerable	2026-06-08 05:02:53.380493	Details available Heap-based buffer overflow in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to execute arbitrary code via a large number of VOL elements in an SRS record. Published: 2012-11-18T19:00:00.000Z Updated: 2024-08-06T20:50:18.312Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/273371 http://osvdb.org/87574 https://community.rapid7.com/community/metasploit/blog/2012/11/16/nfr-agent-buffer-vulnerabilites-cve-2012-4959	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2750`	vulnerable	2026-06-08 04:58:09.072906	Details available NFRAgent.exe in Novell File Reporter 1.0.4.2 and earlier allows remote attackers to delete arbitrary files via a full pathname in an SRS OPERATION 4 CMD 5 request to /FSF/CMD. Published: 2011-07-17T20:00:00.000Z Updated: 2024-08-06T23:08:23.780Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1025716 http://secunia.com/advisories/45071 http://aluigi.org/adv/nfr_2-adv.txt http://www.securityfocus.com/archive/1/518626/100/0/threaded http://securityreason.com/securityalert/8309	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.