Vulnerabilities > CVE-2011-2750 - Resource Management Errors vulnerability in Novell File Reporter 1.0.1/1.0.1.1/1.0.2

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
novell
CWE-399
metasploit
NVD
Published: 2011-07-17
Updated: 2024-11-21

Summary

NFRAgent.exe in Novell File Reporter 1.0.4.2 and earlier allows remote attackers to delete arbitrary files via a full pathname in an SRS OPERATION 4 CMD 5 request to /FSF/CMD.

Vulnerable Configurations

Part Description Count
Application
Novell
3

Common Weakness Enumeration (CWE)

Metasploit

descriptionNFRAgent.exe in Novell File Reporter allows remote attackers to delete arbitrary files via a full pathname in an SRS request with OPERATION set to 4 and CMD set to 5 against /FSF/CMD. This module has been tested successfully on NFR Agent 1.0.4.3 (File Reporter 1.0.2) and NFR Agent 1.0.3.22 (File Reporter 1.0.1) on Windows platforms.
idMSF:AUXILIARY/ADMIN/HTTP/NOVELL_FILE_REPORTER_FILEDELETE
last seen2019-12-28
modified2017-07-24
published2012-09-13
references
reporterRapid7
sourcehttps://github.com/rapid7/metasploit-framework/blob/master//modules/auxiliary/admin/http/novell_file_reporter_filedelete.rb
titleNovell File Reporter Agent Arbitrary File Delete

References