PT-2006-4426 · Ncp · Ncp Secure Enterprise Client

Published 2006-07-13 · Updated 2017-07-20 · CVE-2006-3551

Positive Technologies (AI Summary)

CVSS v2.0

1.2

Low

Base vector

AV:L/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions NCP Secure Enterprise Client versions 8.30 Build 59 and earlier

Description The issue allows context-dependent attackers to send inbound UDP traffic with source port 67 and destination port 68, and outbound UDP traffic with source port 68 and destination port 67, when the Link Firewall and Personal Firewall are both configured to block all inbound and outbound network traffic.

Recommendations For versions 8.30 Build 59 and earlier, consider reconfiguring the firewall settings to properly block the specified UDP traffic, or apply alternative security measures to restrict inbound and outbound network traffic.

Fix

Related Identifiers

CVE-2006-3551

Affected Products

Ncp Secure Enterprise Client

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2006-3551 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27484 · Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047547.html · Note