PT-2006-2005 · Ncp · Ncp Network Communication Secure Client

Published 2006-03-02 · Updated 2018-10-18 · CVE-2006-0966

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions NCP Network Communication Secure Client version 8.11 Build 146

Description The issue allows local users to cause a denial of service, resulting in CPU consumption, by providing a large number of arguments to the ncprwsnt.exe executable. This could be due to a buffer overflow.

Recommendations For NCP Network Communication Secure Client version 8.11 Build 146, consider restricting the number of arguments that can be passed to the ncprwsnt.exe executable to prevent CPU consumption. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-399

CWE-119

Related Identifiers

CVE-2006-0966

Affected Products

Ncp Network Communication Secure Client

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2006-0966 · Security Note
• http://securityfocus.com/bid/16906 · Note
• http://securityfocus.com/archive/1/426480/100/0/threaded · Note
• http://secunia.com/advisories/19082 · Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042640.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25248 · Note