Exploitation Summary
EIP tracks 3 public exploits for CVE-2012-4959.
PoCs published by Abysssec, Metasploit, juan vazquez, including Metasploit module exploits/windows/novell/file_reporter_fsfui_upload.
AI-analyzed exploit summary This exploit targets a remote code execution vulnerability in Novell File Reporter Agent via XML parsing. It crafts a malicious MOF file to execute arbitrary commands on the target system and retrieves the output.
Description
Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and execute files via a 130 /FSF/CMD request with a .. (dot dot) in a FILE element of an FSFUI record.
Exploits (3)
This exploit targets a remote code execution vulnerability in Novell File Reporter Agent via XML parsing. It crafts a malicious MOF file to execute arbitrary commands on the target system and retrieves the output.
This Metasploit module exploits a directory traversal vulnerability in Novell File Reporter (NFR) Agent to upload arbitrary files via FSFUI records with UICMD 130, leading to remote code execution (RCE). It uploads a VBS payload and a MOF file to execute the payload on the target system.
This Metasploit module exploits a directory traversal vulnerability in Novell File Reporter (NFR) Agent to upload arbitrary files via FSFUI records with UICMD 130. It achieves remote code execution by uploading a VBS payload and a MOF file to execute it.