Novell File Reporter Agent XML Tag Remote Code Execution Vulnerability
BID:47144
Info
Novell File Reporter Agent XML Tag Remote Code Execution Vulnerability
| Bugtraq ID: | 47144 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2011-0994 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 04 2011 12:00AM |
| Updated: | Apr 21 2011 02:24PM |
| Credit: | Stephen Fewer of Harmony Security |
| Vulnerable: |
Novell File Reporter Agent 1.0.1 |
| Not Vulnerable: |
Novell File Reporter Agent 1.0.2 |
Discussion
Novell File Reporter Agent XML Tag Remote Code Execution Vulnerability
Novell File Reporter Agent is prone to a remote code-execution vulnerability.
Attackers can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will result in the complete compromise of affected computers.
Novell File Reporter Agent is prone to a remote code-execution vulnerability.
Attackers can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will result in the complete compromise of affected computers.
Exploit / POC
Novell File Reporter Agent XML Tag Remote Code Execution Vulnerability
A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
Solution / Fix
Novell File Reporter Agent XML Tag Remote Code Execution Vulnerability
Solution:
The vendor has released an update. Please see the references for more information.
Solution:
The vendor has released an update. Please see the references for more information.
References
Novell File Reporter Agent XML Tag Remote Code Execution Vulnerability
References:
References:
- Novell Homepage (Novell)