Exploitation Summary
EIP tracks 2 public exploits for CVE-2012-4958.
PoCs published by juan vazquez, including Metasploit module auxiliary/scanner/http/novell_file_reporter_fsfui_fileaccess.
AI-analyzed exploit summary This exploit leverages a remote code execution vulnerability in Novell File Reporter Agent by sending a crafted XML payload to trigger arbitrary command execution via a malicious MOF file. The exploit uses WMI event subscription to execute commands and retrieve results.
Description
Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a 126 /FSF/CMD request with a .. (dot dot) in a FILE element of an FSFUI record.
Exploits (2)
This exploit leverages a remote code execution vulnerability in Novell File Reporter Agent by sending a crafted XML payload to trigger arbitrary command execution via a malicious MOF file. The exploit uses WMI event subscription to execute commands and retrieve results.
This Metasploit module exploits a directory traversal vulnerability in Novell File Reporter (NFR) Agent to retrieve arbitrary text files via crafted FSFUI records. It sends a POST request to /FSF/CMD with a traversal payload to access files outside the intended directory.