CVE-2012-4958

CVE-2012-4958 describes a directory traversal vulnerability in Novell File Reporter 1.0.2, specifically within the NFRAgent.exe component. This flaw allows unauthenticated remote attackers to read arbitrary files on the affected system by manipulating a /FSF/CMD request with ".." sequences in the FILE element of an FSFUI record. With a CVSS score of 7.8, this vulnerability is considered high severity, enabling complete confidentiality compromise without requiring authentication or complex attack methods. While not on the KEV catalog, a Metasploit module exists for exploitation, indicating readily available exploit code, despite limited community discussion or media coverage.