CVE-2006-0968

The ncprwsnt service in NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to execute arbitrary code by modifying the connect.bat script, which is automatically executed by the service after a connection is established...

CVE-2006-0966

NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to cause a denial of service CPU consumption via a large number of arguments to ncprwsnt.exe, possibly due to a buffer overflow...

CVE-2006-0966

The CVE-2006-0966 entry describes a local denial-of-service in NCP Network Communication Secure Client (version 8.11 Build 146 and possibly other versions). The issue is triggered by supplying a large number of arguments to ncprwsnt.exe, with the root cause possibly a buffer overflow, leading to ...

CVE-2006-0964

CVE-2006-0964 affects the NCP Network Communication Secure Client 8.11 Build 146 (and possibly other versions). The vulnerability is that the Client Firewall can be bypassed locally by replacing an allowed program with an arbitrary program, allowing a local attacker to bypass firewall execution r...

CVE-2006-0965

CVE-2006-0965 affects NCP Network Communication Secure Client 8.11 Build 146 and possibly other versions. A local attacker can bypass security protections and access privileged options by supplying a long argument to ncpmon.exe, which may be caused by a buffer overflow. The vulnerability enables ...

CVE-2006-0965

NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to bypass security protections and configure privileged options via a long argument to ncpmon.exe, which provides access to alternate privileged menus, possibly due to a buffer overflow...

CVE-2006-0967

NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to cause a denial of service memory usage and cpu utilization via a flood of arbitrary UDP datagrams to ports 0 to 65000. NOTE: this issue was reported as a buffer overflow, but that term usual...

CVE-2006-0968

The CVE-2006-0968 entry concerns the ncprwsnt service in NCP Network Communication Secure Client 8.11 Build 146 (and possibly other versions). The vulnerability arises because local users can trigger arbitrary code execution by modifying the connect.bat script, which is automatically executed by ...

CVE-2006-0967

The CVE-2006-0967 entry concerns NCP Network Communication Secure Client 8.11 Build 146 (and potentially other versions). A local attacker can cause a denial of service by flooding ports 0–65000 with arbitrary UDP datagrams, leading to increased memory usage and CPU utilization. The issue has bee...

CVE-2006-0964: Undefined Security Weakness

Client Firewall in NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to bypass firewall program execution rules by replacing an allowed program with an arbitrary program...

Multipl NCP Secure Communications VPN / PKI client security vulnerabilities

Local buffer overflows and privilege escalations, remote DoS...

CVE-2006-0965: Undefined Security Weakness

NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to bypass security protections and configure privileged options via a long argument to ncpmon.exe, which provides access to alternate privileged menus, possibly due to a buffer overflow...

CVE-2006-0967: Undefined Security Weakness

NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to cause a denial of service memory usage and cpu utilization via a flood of arbitrary UDP datagrams to ports 0 to 65000. NOTE: this issue was reported as a buffer overflow, but that term usual...

CVE-2006-0966: Improper Restriction of Operations within the Bounds of a Memory Buffer

NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to cause a denial of service CPU consumption via a large number of arguments to ncprwsnt.exe, possibly due to a buffer overflow...

CVE-2006-0968: Undefined Security Weakness

The ncprwsnt service in NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to execute arbitrary code by modifying the connect.bat script, which is automatically executed by the service after a connection is established...

NCP VPN/PKI Client - various Bugs

Application: NCP VPN/PKI Client Site: http://www.ncp.de Version: 8.11, Build 146 and maybe lower OS: Windows Bugs: Local Privilige Escalation, DoS and other Product: ======== NCP's Secure Communications provides a comprehensive portfolio of products for implementing total solutions for...

security flaw

Unknown vulnerability in the 1 AgentX dissector, 2 PER dissector, 3 DOCSIS dissector, 4 SCTP graphs, 5 HTTP dissector, 6 DCERPC, 7 DHCP, 8 RADIUS dissector, 9 Telnet dissector, 10 IS-IS LSP dissector, or 11 NCP dissector in Ethereal 0.8.19 through 0.10.11 allows remote attackers to cause a denial...

FreeBSD : ethereal -- multiple protocol dissectors vulnerabilities (5d51d245-00ca-11da-bc08-0001020eed82)

An Ethreal Security Advisories reports : Our testing program has turned up several more security issues : - The LDAP dissector could free static memory and crash. - The AgentX dissector could crash. - The 802.3 dissector could go into an infinite loop. - The PER dissector could abort. - The DHCP...

security flaw

Unknown vulnerability in the NCP dissector in Ethereal before 0.10.11 allow remote attackers to cause a denial of service long loop...

Moderate: Red Hat Security Advisory: ncpfs security update

An updated ncpfs package is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ncpfs is a file system that understands the Novell NetWareTM NCP protocol. A bug was found in the way ncpfs handled file permissions. ncpfs did not...