CVE-2004-2554

Published Dec 31, 2004 novell

Overview

CVE-2004-2554 is a known-severity vulnerability affecting novell client_firewall. It was published on December 31, 2004.

Technical Description

Novell Client Firewall (NCF) 2.0, as based on the Agnitum Outpost Firewall, allows local users to execute arbitrary code with SYSTEM privileges by opening the NCF tray icon and using the Help functionality to launch programs with SYSTEM privileges.

Remediation

Check the references section for vendor advisories and patches from novell. Update client_firewall to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor	Product	Versions	Status

References

Ref secunia.com/advisories/11014 Ref securitytracker.com/id?1008755 Ref support.novell.com/cgi-bin/search/searchtid.cgi?/10090585.htm Ref www.ciac.org/ciac/bulletins/o-090.shtml Ref www.osvdb.org/4120 Ref www.securityfocus.com/bid/9441 Ref exchange.xforce.ibmcloud.com/vulnerabilities/15367 Ref secunia.com/advisories/11014 Ref securitytracker.com/id?1008755 Ref support.novell.com/cgi-bin/search/searchtid.cgi?/10090585.htm

Frequently Asked Questions

What is CVE-2004-2554?

CVE-2004-2554 is a known-severity vulnerability affecting novell client_firewall. It was published on December 31, 2004.

How severe is CVE-2004-2554?

CVSS score information is not yet available for this vulnerability. Check back as the CVE record is updated by NVD analysts.

How do I fix or remediate CVE-2004-2554?

How can CyberStrike help with CVE-2004-2554?

CyberStrike's AI-powered security agents can automatically detect CVE-2004-2554 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.