Login Request a demo
Unscored severity · published Apr 10, 2011
CVE-2011-0994
Stack-based buffer overflow in NFRAgent.exe in Novell File Reporter (NFR) before 1.0.2 allows remote attackers to execute arbitrary code via unspecified XML data
–
CVSS
17.9%
EPSS
No
On KEV
Description
Stack-based buffer overflow in NFRAgent.exe in Novell File Reporter (NFR) before 1.0.2 allows remote attackers to execute arbitrary code via unspecified XML data.
Exploitation
Is it being used?
Exploit prediction (EPSS)17.9% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FR
File Reporter · Novell
through 1.0.1 · source: NVD
Affected product
FR
File Reporter
Novell
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0994
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0994
Patch
http://download.novell.com/Download?buildid=rCAgCcbPH9s~
secunia.com
http://secunia.com/advisories/43975
securityreason.com
http://securityreason.com/securityalert/8194
www.securityfocus.com
http://www.securityfocus.com/archive/1/517321/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/47144
www.securitytracker.com
http://www.securitytracker.com/id?1025292
More from File Reporter
–
CVE-2012-4959
Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and execute files via a 130 /FSF/CMD request with a
–
CVE-2012-4958
Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a 126 /FSF/CMD request with a
–
CVE-2012-4957
Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a /FSF/CMD request with a full pathname in…
–
CVE-2012-4956
Heap-based buffer overflow in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to execute arbitrary code via a large number of VOL elements in an SRS record
–
CVE-2011-2750
NFRAgent.exe in Novell File Reporter 1.0.4.2 and earlier allows remote attackers to delete arbitrary files via a full pathname in an SRS OPERATION 4 CMD 5 request to /FSF/CMD