CVE-2006-0964 - Client Firewall in NCP Network Communication Secure Client 8.11 Build 146, and possibly other versio

CVE-2006-0964

Summary

Client Firewall in NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to bypass firewall program execution rules by replacing an allowed program with an arbitrary program.

References

http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042640.html
http://secunia.com/advisories/19082
http://www.securityfocus.com/archive/1/426480/100/0/threaded
http://www.securityfocus.com/bid/16906
https://exchange.xforce.ibmcloud.com/vulnerabilities/25242

Vulnerable Configurations

cpe:2.3:a:ncp_network_communications:secure_client:8.11_build_146:*:*:*:*:*:*:*
cpe:2.3:a:ncp_network_communications:secure_client:8.11_build_146:*:*:*:*:*:*:*

CVSS

Base:	4.6 (as of 18-10-2018 - 16:29)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:L/AC:L/Au:N/C:P/I:P/A:P

refmap via4

bid	16906
bugtraq	20060301 NCP VPN/PKI Client - various Bugs
fulldisc	20060301 NCP VPN/PKI Client - various Bugs
secunia	19082
xf	ncp-client-firewall-bypass-security(25242)

Last major update

18-10-2018 - 16:29

Published

02-03-2006 - 23:02

Last modified

18-10-2018 - 16:29