Security Advisory

CVE-2012-4959

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2012-11-18 19:00:00
Last updated 2024-09-16 20:43:13
Assigner certcc
CVSS score not scored
State PUBLISHED

Description

Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and execute files via a 130 /FSF/CMD request with a .. (dot dot) in a FILE element of an FSFUI record.