Lucene search
HistoryMar 02, 2006 - 11:02 p.m.
CVE-2006-0968
ncp network communication secure client
ncprwsnt
cve-2006-0968
arbitrary code execution
vulnerability
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.2 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
25.7%
The ncprwsnt service in NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to execute arbitrary code by modifying the connect.bat script, which is automatically executed by the service after a connection is established.
Affected configurations
Node
ncp_network_communicationssecure_clientMatch8.11_build_146
| CPE | Name | Operator | Version |
|---|---|---|---|
| ncp_network_communications:secure_client | ncp network communications secure client | eq | 8.11_build_146 |
Related
nvd
nvd
CVE-2006-0968
2006-03-02 23:02:00
prion
prion
Code injection
2006-03-02 23:02:00
cvelist
cvelist
CVE-2006-0968
2006-03-02 23:00:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.2 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
25.7%
Related for CVE-2006-0968