http://download.novell.com/Download?buildid=rCAgCcbPH9s~

43975

8194

20110404 ZDI-11-116: Novell File Reporter Agent XML Parsing Remote Code Execution Vulnerability

47144

1025292

ADV-2011-0866

http://www.zerodayinitiative.com/advisories/ZDI-11-116/

filereporter-nfragent-bo(66548)

oval:org.mitre.oval:def:12064

The version of Novell File Reporter (NFR) Agent running on the remote host is earlier than 1.0.4.2.  Such versions reportedly have a buffer overflow vulnerability because the service, which listens by default on TCP port 3037, blindly copies user supplied data into a fixed-length buffer on the stack when handling the contents of an XML tag. 

An unauthenticated, remote attacker who can access the agent service can leverage this issue to execute arbitrary code under the context of the SYSTEM user.

Novell File Reporter Agent, a tool for identifying files stored on the network, is installed on the remote host. 

Versions of Novell File Reporter Agent earlier than 1.0.4.2 are potentially affected by a buffer overflow vulnerability because the service, which listens by default on TCP port 3037, blindly copies user-supplied data into a fixed-length buffer on the stack when handling the contents of an XML tag.  An unauthenticated remote attacker who can access the agent service can leverage this issue to execute arbitrary code under the context of the user running the affected application.

The version of Novell File Reporter (NFR) Agent installed on the remote Windows host is earlier than 1.0.4.2. Such versions reportedly have a buffer overflow vulnerability because the service, which listens by default on TCP port 3037, blindly copies user-supplied data into a fixed-length buffer on the stack when handling the contents of an XML tag.

An unauthenticated, remote attacker with access to the agent service can leverage this issue to execute arbitrary code under the context of the SYSTEM user.

ID	Name	Product	Family	Severity
62026	Novell File Reporter Agent XML Parsing Remote Code Execution	Nessus	Gain a shell remotely	critical
5907	Novell File Reporter Agent XML Parsing Remote Code Execution	Nessus Network Monitor	Generic	critical
53536	Novell File Reporter Agent XML Tag Handling Buffer Overflow	Nessus	Windows	critical

CVE-2011-0994

high

Tenable Plugins

critical

critical

critical