Exploitation Summary
EIP tracks 2 public exploits for CVE-2012-4957.
PoCs published by juan vazquez, including Metasploit module auxiliary/scanner/http/novell_file_reporter_srs_fileaccess.
AI-analyzed exploit summary This exploit leverages a remote code execution vulnerability in Novell File Reporter Agent by sending a crafted XML payload to trigger arbitrary command execution via a malicious MOF file. The exploit uses WMI event subscription to execute VBScript, demonstrating a full RCE chain.
Description
Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a /FSF/CMD request with a full pathname in a PATH element of an SRS record.
Exploits (2)
This exploit leverages a remote code execution vulnerability in Novell File Reporter Agent by sending a crafted XML payload to trigger arbitrary command execution via a malicious MOF file. The exploit uses WMI event subscription to execute VBScript, demonstrating a full RCE chain.
This Metasploit module exploits a vulnerability in Novell File Reporter (NFR) Agent to retrieve arbitrary files via a crafted SRS Record request. It sends a POST request to /FSF/CMD with a specific XML payload to read files from the target system.