Intrusion Prevention

Novell.File.Reporter.SRS.Arbritrary.File.Retrieval

Description

This indicates an attack attempt to exploit an arbitrary File Retrieval vulnerability in Novell File Reporter.
The vulnerability is due to insufficient sanitizing of user supplied inputs in the application when handling SRS requests. A remote attacker can exploit this to gain unauthorized access to sensitive information.

Affected Products

Novell File Reporter all versions

Impact

Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.

Recommended Actions

Currently we are unaware of any vendor supplied patch or updates available for this issue.

CVE References

CVE-2012-4957