CVE-2004-2554
Novell Client Firewall (NCF) 2.0, as based on the Agnitum Outpost Firewall, allows local users to...
Novell Client Firewall (NCF) 2.0, as based on the Agnitum Outpost Firewall, allows local users to execute arbitrary code with SYSTEM privileges by opening the NCF tray icon and using the Help functionality to launch programs with SYSTEM privileges.
Exploit likelihood
What each source reports
NVD Score used
Novell Client Firewall (NCF) 2.0, as based on the Agnitum Outpost Firewall, allows local users to execute arbitrary code with SYSTEM privileges by opening the NCF tray icon and using the Help functionality to launch programs with SYSTEM privileges.
- Record
CVE-2004-2554- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Novell Client Firewall (NCF) 2.0, as based on the Agnitum Outpost Firewall, allows local users to execute arbitrary code with SYSTEM privileges by opening the NCF tray icon and using the Help functionality to launch programs with SYSTEM privileges.
- Record
CVE-2004-2554- Updated
- 2026-11-02
EUVDEUVD-2004-2545 No score
Novell Client Firewall (NCF) 2.0, as based on the Agnitum Outpost Firewall, allows local users to execute arbitrary code with SYSTEM privileges by opening the NCF tray icon and using the Help functionality to launch programs with SYSTEM privileges.
- Record
EUVD-2004-2545- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2qh3-fm9g-rf2x No score
Novell Client Firewall (NCF) 2.0, as based on the Agnitum Outpost Firewall, allows local users to...
Novell Client Firewall (NCF) 2.0, as based on the Agnitum Outpost Firewall, allows local users to execute arbitrary code with SYSTEM privileges by opening the NCF tray icon and using the Help functionality to launch programs with SYSTEM privileges.
- Record
GHSA-2qh3-fm9g-rf2x- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-2554 is a high vulnerability (CVSS 7.2) in Novell Client Firewall, published December 31, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 35th percentile. No source names a fixed version.
References
ciac.org/ciac/bulletins/o-090.shtml
securitytracker.com/id?1008755
exchange.xforce.ibmcloud.com/vulnerabilities/15367
secunia.com/advisories/11014
support.novell.com/cgi-bin/search/searchtid.cgi?/10090585.htm
osvdb.org/4120
securityfocus.com/bid/9441
nvd.nist.gov/vuln/detail/CVE-2004-2554
github.com/advisories/GHSA-2qh3-fm9g-rf2x