PT-2006-2003 · Ncp · Ncp Network Communication Secure Client

Published 2006-03-02 · Updated 2018-10-18 · CVE-2006-0964

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NCP Network Communication Secure Client version 8.11 Build 146

Description The issue allows local users to bypass firewall program execution rules. This is achieved by replacing an allowed program with an arbitrary program, effectively circumventing the security measures in place.

Recommendations For NCP Network Communication Secure Client version 8.11 Build 146, consider implementing strict access controls to prevent unauthorized replacement of allowed programs until a patch is available. As a temporary workaround, monitor program execution rules closely to detect any potential bypass attempts.

Fix

Related Identifiers

CVE-2006-0964

Affected Products

Ncp Network Communication Secure Client

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2006-0964 · Security Note
• http://securityfocus.com/bid/16906 · Note
• http://securityfocus.com/archive/1/426480/100/0/threaded · Note
• http://secunia.com/advisories/19082 · Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042640.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25242 · Note