ZDI-11-116: Novell File Reporter Agent XML Parsing Remote Code Execution Vulnerability

0
47

Posted by ZDI Disclosures on Apr 04

ZDI-11-116: Novell File Reporter Agent XML Parsing Remote Code Execution Vulnerability

http://www.zerodayinitiative.com/advisories/ZDI-11-116

April 4, 2011

— CVE ID:
CVE-2011-0994

— CVSS:
10, (AV:N/AC:L/Au:N/C:C/I:C/A:C)

— Affected Vendors:
Novell

— Affected Products:
Novell File Reporter

— TippingPoint(TM) IPS Customer Protection:
TippingPoint IPS customers have been protected against this
vulnerability by Digital Vaccine protection…

Source: ZDI-11-116: Novell File Reporter Agent XML Parsing Remote Code Execution Vulnerability