PT-2004-3445 · Novell · Novell Client Firewall

Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-2554

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell Client Firewall (NCF) version 2.0

Description The issue allows local users to execute arbitrary code with SYSTEM privileges. This can be achieved by opening the NCF tray icon and utilizing the Help functionality to launch programs with elevated privileges.

Recommendations For Novell Client Firewall (NCF) version 2.0, consider disabling the Help functionality in the NCF tray icon until a patch is available to prevent exploitation.

Correção

Identificadores relacionados

CVE-2004-2554

Produtos afetados

Novell Client Firewall

Referências · 8

• http://osvdb.org/4120 · Nota
• http://secunia.com/advisories/11014 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-2554 · Nota de Segurança
• http://ciac.org/ciac/bulletins/o-090.shtml · Aviso do Fabricante
• http://support.novell.com/cgi-bin/search/searchtid.cgi?/10090585.htm · Aviso do Fabricante
• http://securityfocus.com/bid/9441 · Nota
• http://securitytracker.com/id?1008755 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15367 · Nota