CVE-2004-2554

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-12-31 · updated 2026-06-16

Description

Novell Client Firewall (NCF) 2.0, as based on the Agnitum Outpost Firewall, allows local users to execute arbitrary code with SYSTEM privileges by opening the NCF tray icon and using the Help functionality to launch programs with SYSTEM privileges.

Affected products

Novell Client Firewall: 2.0

References

http://secunia.com/advisories/11014
http://securitytracker.com/id?1008755
http://support.novell.com/cgi-bin/search/searchtid.cgi?/10090585.htm
http://www.ciac.org/ciac/bulletins/o-090.shtml
http://www.osvdb.org/4120
http://www.securityfocus.com/bid/9441
https://exchange.xforce.ibmcloud.com/vulnerabilities/15367
http://secunia.com/advisories/11014
http://securitytracker.com/id?1008755
http://support.novell.com/cgi-bin/search/searchtid.cgi?/10090585.htm
http://www.ciac.org/ciac/bulletins/o-090.shtml
http://www.osvdb.org/4120

Get alerted when CVE-2004-2554 or the next vulnerability affects your stack