Novell Client Firewall Tray Icon Lets Local Users Execute Commands With SYSTEM Privileges

  • 10090585
  • NOVL95044
  • 23-Jan-2004
  • 01-Mar-2004

Fact

Novell Client Firewall

Symptom

Novell Client Firewall Tray Icon Lets Local Users Execute Commands With SYSTEM Privileges

Fix

Defect submitted on 1/23/04.  Fixed on 2/27/04 and fix posted to the auto-update site on 3/1/04.

Note

NCF is based on Agnitum Outpost firewall... it is consequently vulnerable to the same attack disclosed recently:

http://www.securitytracker.com/alerts/2004/Jan/1008755.html