CVE-2011-2750

Name of the Vulnerable Software and Affected Versions Novell File Reporter versions 1.0.4.2 and earlier

Description The issue allows remote attackers to delete arbitrary files by sending a full pathname in an SRS OPERATION 4 CMD 5 request to the "/FSF/CMD" API endpoint.

Recommendations For Novell File Reporter versions 1.0.4.2 and earlier, consider restricting access to the "/FSF/CMD" API endpoint until a fix is available. As a temporary workaround, avoid using full pathnames in SRS OPERATION 4 CMD 5 requests to minimize the risk of exploitation.