CVE-2012-4959: Path Traversal
Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and execute files via a 130 /FSF/CMD request with a .. (dot dot) in a FILE element of an FSFUI record.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4959?
CVE-2012-4959 is rated as a high-severity vulnerability due to its ability to allow remote file uploads and execution.
How do I fix CVE-2012-4959?
To fix CVE-2012-4959, you should upgrade to a newer version of Novell File Reporter that is not affected by this vulnerability.
What are the potential impacts of CVE-2012-4959?
The potential impacts of CVE-2012-4959 include unauthorized file uploads, possible remote code execution, and compromise of the affected system.
Who is affected by CVE-2012-4959?
CVE-2012-4959 affects users of Novell File Reporter version 1.0.2 specifically.
How can attackers exploit CVE-2012-4959?
Attackers can exploit CVE-2012-4959 by sending specially crafted requests to upload malicious files to the server.