CVE-2012-4957: Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers...

Security readout for executives and security teams

This issue lets a remote attacker read files from a server running Novell File Reporter 1.0.2 if the NFRAgent service is reachable. The business risk is information disclosure: configuration, credentials, or sensitive operational files could be exposed. The source bundle does not provide CVSS, a confirmed patch, or evidence of active exploitation. Exposure is likely limited to organizations still running Novell File Reporter 1.0.2 with NFRAgent reachable from untrusted networks. Internet-facing, flat internal network, or poorly segmented agent deployments would carry higher risk. Prioritize discovery and containment if Novell File Reporter 1.0.2 exists. The vulnerability is old, but remote arbitrary file read can expose credentials or sensitive data. Urgency depends on whether NFRAgent is still deployed and reachable. Mitigation focus: Identify and retire or upgrade Novell File Reporter 1.0.2 deployments.; Check vendor or CERT guidance for supported remediation.; Restrict NFRAgent access to trusted management networks only..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.