CVE-2012-4958

This Metasploit module exploits a directory traversal vulnerability in Novell File Reporter (NFR) Agent to retrieve arbitrary text files via crafted FSFUI records. It sends a POST request to /FSF/CMD with a traversal payload to access files outside the intended directory.

This exploit leverages a remote code execution vulnerability in Novell File Reporter Agent by sending a crafted XML payload to trigger arbitrary command execution via a malicious MOF file. The exploit uses WMI event subscription to execute commands and retrieve results.