PT-2006-2007 · Ncp · Ncp Network Communication Secure Client

Ports + 1 · Published 2006-03-02 · Updated 2018-10-18 · CVE-2006-0968

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NCP Network Communication Secure Client version 8.11 Build 146

Description The issue allows local users to execute arbitrary code by modifying the connect.bat script, which is automatically executed by the service after a connection is established.

Recommendations For NCP Network Communication Secure Client version 8.11 Build 146, consider restricting access to the connect.bat script to prevent modification and potential code execution until a fix is available.

Fix

Related Identifiers

CVE-2006-0968

Affected Products

Ncp Network Communication Secure Client

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2006-0968 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25251 · Note
• http://securityreason.com/securityalert/524 · Note
• http://securityfocus.com/bid/16906 · Note
• http://securityfocus.com/archive/1/426480/100/0/threaded · Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042640.html · Note
• http://secunia.com/advisories/19082 · Note