Vulnerabilities > CVE-2006-0968 - Multiple vulnerability in NCP Network Communications Secure Client 8.11Build146

047910
CVSS 7.2 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
low complexity
ncp-network-communications
NVD
Published: 2006-03-02
Updated: 2018-10-18

Summary

The ncprwsnt service in NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to execute arbitrary code by modifying the connect.bat script, which is automatically executed by the service after a connection is established.

Vulnerable Configurations

Part Description Count
Application
Ncp_Network_Communications
1

References