Novell.File.Reporter.Agent.XML.Tag.Remote.Code.Execution

Release Date Jul 28, 2011
Severity medium
Impact System Compromise: Remote attackers can execute arbitrary code on vulnerable systems.
Description This indicates an attempt to exploit a remote Code Execution vulnerability in Novell File Reporter Agent. The vulnerability is the result of a boundry error when the software handles a specially crafted XML tag.
Affected Products Novell File Reporter Agent 1.0.1
Recommended Actions The vendor has released an update for this vulnerability. http://www.novell.com/home/
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2011-0994
Reference/s http://www.securityfocus.com/bid/47144 (BugTraq)

Fortinet