CVE-2004-2554 json
Novell Client Firewall (NCF) 2.0, as based on the Agnitum Outpost Firewall, allows local users to execute arbitrary code with SYSTEM privil…
published 2004-12-31 21 y ago modified 2026-06-16 4 mo ago also EUVD-2004-2545
- cvss
- 7.2
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.4%
- EPSS 0.4% chance of exploitation in 30 days, percentile 35%
- public exploits
- 0
- none known
Summary
Novell Client Firewall (NCF) 2.0, as based on the Agnitum Outpost Firewall, allows local users to execute arbitrary code with SYSTEM privileges by opening the NCF tray icon and using the Help functionality to launch programs with SYSTEM privileges.
Exploit prediction
0.41% chance of exploitation in the next 30 days, higher than 35% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.2 | AV:L/AC:L/Au:N/C:C/I:C/A:C |
References
-
ciac.org
/ciac/bulletins/o-090.shtml
third-party-advisory, government-resource, vendor-advisory
-
secunia.com
/advisories/11014
third-party-advisory, vendor-advisory
-
support.novell.com
/cgi-bin/search/searchtid.cgi?/10090585.htm
vendor-advisory
-
securitytracker.com
/id?1008755
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/15367
vdb-entry
-
osvdb.org
/4120
vdb-entry
-
securityfocus.com
/bid/9441
vdb-entry
Sources
- CVE List CVE-2004-2554
- NVD CVE-2004-2554
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.