CVE-2012-4958: Path Traversal
Published Nov 18, 2012
·Updated
Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a 126 /FSF/CMD request with a .. (dot dot) in a FILE element of an FSFUI record.
Affected Software
1 affected component
Novell File Reporter=1.0.2
Event History
Nov 18, 2012
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What systems are affected by CVE-2012-4958?
CVE-2012-4958 affects Novell File Reporter version 1.0.2.
2
What is the severity of CVE-2012-4958?
CVE-2012-4958 is classified as a medium-severity vulnerability due to its potential for unauthorized file access.
3
How do attackers exploit CVE-2012-4958?
Attackers exploit CVE-2012-4958 by sending a specially crafted request with a .. (dot dot) sequence to access restricted files.
4
How can I mitigate CVE-2012-4958?
Mitigation for CVE-2012-4958 involves upgrading to a version of Novell File Reporter that is not affected by this vulnerability.
5
Is CVE-2012-4958 still a threat today?
While CVE-2012-4958 was reported in 2012, systems using the vulnerable version without patches remain at risk.