PT-2006-2005 · Ncp · Ncp Network Communication Secure Client

Publicado 2006-03-02 · Atualizado 2018-10-18 · CVE-2006-0966

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions NCP Network Communication Secure Client version 8.11 Build 146

Description The issue allows local users to cause a denial of service, resulting in CPU consumption, by providing a large number of arguments to the ncprwsnt.exe executable. This could be due to a buffer overflow.

Recommendations For NCP Network Communication Secure Client version 8.11 Build 146, consider restricting the number of arguments that can be passed to the ncprwsnt.exe executable to prevent CPU consumption. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Enumeração de Fraquezas

CWE-399

CWE-119

Identificadores relacionados

CVE-2006-0966

Produtos afetados

Ncp Network Communication Secure Client

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2006-0966 · Nota de Segurança
• http://securityfocus.com/bid/16906 · Nota
• http://securityfocus.com/archive/1/426480/100/0/threaded · Nota
• http://secunia.com/advisories/19082 · Nota
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042640.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25248 · Nota