Novell File Reporter Agent Vulnerability Patch 1.0

abstract

Description :The version of Novell File Reporter Agent running on the remote host  has an arbitrary file download vulnerability.  Making a specially crafted POST request to /FSF/CMD for records with a name of FSFUI and UICMD of 126 could result in arbitrary files being downloaded.  A remote, unauthenticated attacker could exploit this to download arbitrary files as root (against Linux targets) or SYSTEM (against Windows targets)

details

Overview:

Description :The version of Novell File Reporter Agent running on the remote host  has an arbitrary file download vulnerability.  Making a specially crafted POST request to /FSF/CMD for records with a name of FSFUI and UICMD of 126 could result in arbitrary files being downloaded.  A remote, unauthenticated attacker could exploit this to download arbitrary files as root (against Linux targets) or SYSTEM (against Windows targets)

 System Requirements:

Installation:

RPM -Uvh

 Uninstalling:

Known Problems and Limitations:

Technical Support Information:

security fixes

CVE-2012-4956 - Heap Overflow
When handling requests of name "SRS", the NFRAgent.exe fails to generate a response in a secure way, copying user controlled data into a fixed-length buffer in the heap without bounds checking. This vulnerability can result in remote code execution under the context of the SYSTEM account.

CVE-2012-4957 - Arbitrary File Retrieval
When handling requests on "/FSF/CMD" for records with NAME "SRS", OPERATION "4" and CMD "103" the NFRAgent.exe allows a remote unauthenticated user to retrieve arbitrary remote files, specified with the tag "PATH", with SYSTEM privileges.

CVE-2012-4958 - Arbitrary File Retrieval
When handling requests on "/FSF/CMD" for records with NAME "FSFUI" and UICMD "126" the NFRAgent.exe allows a remote unauthenticated user to retrieve arbitrary remote text files, specified with the tag "FILE", with SYSTEM privileges.

CVE-2012-4959 - Arbitrary File Upload
When handling requests on "/FSF/CMD" for records with NAME "FSFUI" and UICMD "130" the NFRAgent.exe allows a remote unauthenticated user to upload files to the host, specified with the tag "FILE", with SYSTEM privileges. It allows to execute remote code with SYSTEM privileges.