Login Request a demo
Unscored severity · published Jul 17, 2011
CVE-2011-2750
NFRAgent.exe in Novell File Reporter 1.0.4.2 and earlier allows remote attackers to delete arbitrary files via a full pathname in an SRS OPERATION 4 CMD 5 request to /FSF/CMD
–
CVSS
16.7%
EPSS
No
On KEV
Description
NFRAgent.exe in Novell File Reporter 1.0.4.2 and earlier allows remote attackers to delete arbitrary files via a full pathname in an SRS OPERATION 4 CMD 5 request to /FSF/CMD.
Exploitation
Is it being used?
Exploit prediction (EPSS)16.7% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FR
File Reporter · Novell
through 1.0.4.2; 1.0.1; 1.0.1.1; 1.0.2 · source: NVD
Affected product
FR
File Reporter
Novell
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-2750
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-2750
Exploit
http://aluigi.org/adv/nfr_2-adv.txt
Vendor Advisory
http://secunia.com/advisories/45071
securityreason.com
http://securityreason.com/securityalert/8309
securitytracker.com
http://securitytracker.com/id?1025716
www.securityfocus.com
http://www.securityfocus.com/archive/1/518626/100/0/threaded
More from File Reporter
–
CVE-2012-4959
Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and execute files via a 130 /FSF/CMD request with a
–
CVE-2012-4958
Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a 126 /FSF/CMD request with a
–
CVE-2012-4957
Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a /FSF/CMD request with a full pathname in…
–
CVE-2012-4956
Heap-based buffer overflow in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to execute arbitrary code via a large number of VOL elements in an SRS record
–
CVE-2011-2220
Stack-based buffer overflow in NFREngine.exe in Novell File Reporter Engine before 1.0.2.53, as used in Novell File Reporter and other products, allows remote attackers to execute…