PT-2006-2003 · Ncp · Ncp Network Communication Secure Client

Publicado 2006-03-02 · Atualizado 2018-10-18 · CVE-2006-0964

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NCP Network Communication Secure Client version 8.11 Build 146

Description The issue allows local users to bypass firewall program execution rules. This is achieved by replacing an allowed program with an arbitrary program, effectively circumventing the security measures in place.

Recommendations For NCP Network Communication Secure Client version 8.11 Build 146, consider implementing strict access controls to prevent unauthorized replacement of allowed programs until a patch is available. As a temporary workaround, monitor program execution rules closely to detect any potential bypass attempts.

Correção

Identificadores relacionados

CVE-2006-0964

Produtos afetados

Ncp Network Communication Secure Client

Referências · 6

• http://securityfocus.com/bid/16906 · Nota
• http://securityfocus.com/archive/1/426480/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0964 · Nota de Segurança
• http://secunia.com/advisories/19082 · Nota
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042640.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25242 · Nota