PT-2004-3445 · Novell · Novell Client Firewall

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-2554

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell Client Firewall (NCF) version 2.0

Description The issue allows local users to execute arbitrary code with SYSTEM privileges. This can be achieved by opening the NCF tray icon and utilizing the Help functionality to launch programs with elevated privileges.

Recommendations For Novell Client Firewall (NCF) version 2.0, consider disabling the Help functionality in the NCF tray icon until a patch is available to prevent exploitation.

Fix

Related Identifiers

CVE-2004-2554

Affected Products

Novell Client Firewall

References · 8

• http://secunia.com/advisories/11014 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-2554 · Security Note
• http://ciac.org/ciac/bulletins/o-090.shtml · Vendor Advisory
• http://support.novell.com/cgi-bin/search/searchtid.cgi?/10090585.htm · Vendor Advisory
• http://osvdb.org/4120 · Note
• http://securityfocus.com/bid/9441 · Note
• http://securitytracker.com/id?1008755 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15367 · Note