CVE-2012-4958

Publication date

2012-11-18 19:00:00

Family

certcc

State

PUBLISHED

Description

Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a 126 /FSF/CMD request with a .. (dot dot) in a FILE element of an FSFUI record.