Novell Client Firewall vulnerabilities

2 CVEs affecting Novell Client Firewall, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2006-3697, published 2006-07-21.

More from Novell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2006-3697, published 2006-07-21. High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days. Agnitum Outpost Firewall Pro 3.51.759.6511 (462), as used in (1) Lavasoft Personal Firewall 1.0.543.5722 (433) and (2) Novell BorderManager Novell Client Firewall 2.0, does not properly restrict user…
• CVE-2004-2554, published 2004-12-31. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. Novell Client Firewall (NCF) 2.0, as based on the Agnitum Outpost Firewall, allows local users to execute arbitrary code with SYSTEM privileges by opening the NCF tray icon and using the Help…