Novell File Reporter NFRAgent.exe VOL Tag Remote Code Execution Vulnerability
2015年7月21日
危険度: 中
CVE識別番号: CVE-2011-2750
情報公開日: 7 21, 2015
概要
NFRAgent.exe in Novell File Reporter 1.0.4.2 and earlier allows remote attackers to delete arbitrary files via a full pathname in an SRS OPERATION 4 CMD 5 request to /FSF/CMD.
トレンドマイクロの対策
Apply associated Trend Micro DPI Rules.
対応方法
Trend Micro Deep Security DPI Rule Number: 1005232
Trend Micro Deep Security DPI Rule Name: 1005232 - Novell File Reporter 'NFRAgent.exe' VOL Tag Remote Code Execution Vulnerability
影響を受けるソフトウェア
- novell file_reporter 1.0.1
- novell file_reporter 1.0.1.1
- novell file_reporter 1.0.2
- novell file_reporter 1.0.4.2