CVE-2011-2750 NFRAgent.exe in Novell File Reporter 1.0.4.2 and earlier allows remote attackers to delete arbitrary files via a full pathname in an SRS OPERATION 4 CMD 5 request to /FSF/CMD.
MediumCVSS 5.0
EPSS 16.7%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
NFRAgent.exe in Novell File Reporter 1.0.4.2 and earlier allows remote attackers to delete arbitrary files via a full pathname in an SRS OPERATION 4 CMD 5 request to /FSF/CMD.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| novell file reporter | <= 1.0.4.2 | No fix listed |
| novell file reporter | = 1.0.1 | No fix listed |
| novell file reporter | = 1.0.1.1 | No fix listed |
| novell file reporter | = 1.0.2 | No fix listed |
References
- aluigi.org exploit
- 45071 third-party-advisory vendor-advisory
- 8309 third-party-advisory
- 1025716 vdb-entry
- 20110627 Arbitrary files deletion in Novell File Reporter 1.0.4.2 mailing-list