PT-2006-2007 · Ncp · Ncp Network Communication Secure Client

Ports + 1 · Publicado 2006-03-02 · Atualizado 2018-10-18 · CVE-2006-0968

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NCP Network Communication Secure Client version 8.11 Build 146

Description The issue allows local users to execute arbitrary code by modifying the connect.bat script, which is automatically executed by the service after a connection is established.

Recommendations For NCP Network Communication Secure Client version 8.11 Build 146, consider restricting access to the connect.bat script to prevent modification and potential code execution until a fix is available.

Correção

Identificadores relacionados

CVE-2006-0968

Produtos afetados

Ncp Network Communication Secure Client

Referências · 7

• https://exchange.xforce.ibmcloud.com/vulnerabilities/25251 · Nota
• http://securityreason.com/securityalert/524 · Nota
• http://securityfocus.com/bid/16906 · Nota
• http://securityfocus.com/archive/1/426480/100/0/threaded · Nota
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042640.html · Nota
• http://secunia.com/advisories/19082 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0968 · Nota de Segurança