Intrusion PreventionNovell.File.Reporter.Agent.FSFUI.Record.File.Upload
Description
This indicates an attack attempt against an arbitrary File Upload vulnerability in Novell File Reporter.
The vulnerability is caused by an error when the vulnerable software handles a malicious HTTP request with a crafted URI. It allows a remote attacker to upload an arbitrary file via sending a crafted URI to a vulnerable application.
Affected Products
Novell File Reporter 1.0.2
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Currently we are unaware of any vendor supplied patch for this issue.
Please note that the signature requires SSL deep scan in FortiOS 5.0.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 33926 |
| Created | Mar 27, 2013 |
| Updated | Apr 23, 2014 |
| Risk |
|
| CVE ID | CVE-2012-4959 |
| Exploit Prediction Score | 79.77% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Novell |