CVE-2012-4959

Publication date

2012-11-18 19:00:00

Family

certcc

State

PUBLISHED

Description

Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and execute files via a 130 /FSF/CMD request with a .. (dot dot) in a FILE element of an FSFUI record.