CVE-2004-2554: Novell Client Firewall (NCF) 2.0, as based on the Agnitum Outpost Firewall, allows local users to execute a...

Security readout for executives and security teams

CVE-2004-2554 is a local privilege escalation issue in Novell Client Firewall 2.0. A person already able to use the affected machine could abuse the firewall tray Help function to run programs with SYSTEM-level privileges. This is mainly a legacy endpoint risk, not a remotely triggered network issue in the provided sources. Exposure is most likely limited to legacy systems still running Novell Client Firewall 2.0 where local users can interact with the tray icon. Modern environments are unlikely to be exposed unless old Novell endpoint software remains installed. Treat as a high-priority legacy cleanup item if NCF 2.0 exists in the environment. The impact is full local SYSTEM compromise, but the prerequisite is local access and there is no provided evidence of active exploitation. Mitigation focus: Inventory for Novell Client Firewall 2.0 installations.; Check archived Novell support guidance for vendor-recommended fixes or replacements.; Remove or replace unsupported NCF deployments where business use is not required..

Prepared

Jun 29, 2026, 16:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.