Lucene search
HistoryMar 02, 2006 - 11:02 p.m.
CVE-2006-0968
ncp network communication secure client
ncprwsnt
cve-2006-0968
arbitrary code execution
vulnerability
7.2 High
AI Score
Confidence
High
7.2 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
25.6%
The ncprwsnt service in NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to execute arbitrary code by modifying the connect.bat script, which is automatically executed by the service after a connection is established.
Affected configurations
Node
ncp_network_communicationssecure_clientMatch8.11_build_146
| CPE | Name | Operator | Version |
|---|---|---|---|
| ncp_network_communications:secure_client | ncp network communications secure client | eq | 8.11_build_146 |
Related
prion
prion
Code injection
2006-03-02 23:02:00
nvd
nvd
CVE-2006-0968
2006-03-02 23:02:00
cvelist
cvelist
CVE-2006-0968
2006-03-02 23:00:00
7.2 High
AI Score
Confidence
High
7.2 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
25.6%
Related for CVE-2006-0968