What’s Vulnerable › Vulnerabilities

CVE-2012-4957

• Severity: high (CVSS 7.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 67.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2012-11-18 · updated 2026-06-16
• Weakness: CWE-22

Description

Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a /FSF/CMD request with a full pathname in a PATH element of an SRS record.

Affected products

• Novell File Reporter: 1.0.2

References

• http://www.kb.cert.org/vuls/id/273371
• https://community.rapid7.com/community/metasploit/blog/2012/11/16/nfr-agent-buffer-vulnerabilites-cve-2012-4959
• http://www.kb.cert.org/vuls/id/273371
• https://community.rapid7.com/community/metasploit/blog/2012/11/16/nfr-agent-buffer-vulnerabilites-cve-2012-4959

Get alerted when CVE-2012-4957 or the next vulnerability affects your stack