CVE-2012-4959: Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to...

Security readout for executives and security teams

CVE-2012-4959 affects Novell File Reporter 1.0.2. A vulnerable NFRAgent.exe service can let a remote attacker place and run files by abusing directory traversal. For executives, the concern is unauthorized code execution on systems running this old service, especially if the agent is reachable from untrusted networks. Exposure is likely limited to environments that still run Novell File Reporter 1.0.2 or its NFRAgent.exe component. Risk increases if the agent listens on a network path reachable by attackers, contractors, compromised endpoints, or the internet. Treat as a high-priority legacy exposure review. The issue is old, but remote file upload and execution can become business-critical if forgotten agents remain reachable. Prioritize inventory, isolation, and retirement or vendor-supported remediation. Mitigation focus: Inventory systems for Novell File Reporter 1.0.2 and NFRAgent.exe.; Check vendor and CERT guidance for available updates, replacement, or decommissioning advice.; Remove internet or untrusted-network access to NFRAgent.exe services..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.