NCP Secure Client Multiple Vulnerabilities
BID:16906
Info
NCP Secure Client Multiple Vulnerabilities
| Bugtraq ID: | 16906 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Mar 01 2006 12:00AM |
| Updated: | Mar 06 2006 06:51AM |
| Credit: | Ramon 'ports' Kukla <[email protected]> discovered these issues. |
| Vulnerable: |
NCP Network Communication Secure Client 8.11 Build 146 |
| Not Vulnerable: | |
Discussion
NCP Secure Client Multiple Vulnerabilities
NCP Secure Client is susceptible to multiple vulnerabilities.
The following issues have been identified:
- Firewall rules designed to allow only specific applications to access the network may be bypassed.
- Some applications are prone to local command-line-argument buffer-overflow vulnerabilities.
- The VPN client is susceptible to a remote denial-of-service vulnerability.
- The VPN client is susceptible to a local privilege-escalation vulnerability.
These issues allow local attackers to gain SYSTEM-level privileges, allowing them to completely compromise affected computers. Remote attackers may consume excessive CPU resources, denying service to legitimate users.
NCP Secure Client version 8.11 Build 146 on the Microsoft Windows platform is vulnerable to these issues; other versions may also be affected.
NCP Secure Client is susceptible to multiple vulnerabilities.
The following issues have been identified:
- Firewall rules designed to allow only specific applications to access the network may be bypassed.
- Some applications are prone to local command-line-argument buffer-overflow vulnerabilities.
- The VPN client is susceptible to a remote denial-of-service vulnerability.
- The VPN client is susceptible to a local privilege-escalation vulnerability.
These issues allow local attackers to gain SYSTEM-level privileges, allowing them to completely compromise affected computers. Remote attackers may consume excessive CPU resources, denying service to legitimate users.
NCP Secure Client version 8.11 Build 146 on the Microsoft Windows platform is vulnerable to these issues; other versions may also be affected.
Exploit / POC
NCP Secure Client Multiple Vulnerabilities
Most of these issues do not require an exploit application to trigger them.
Currently we are not aware of any exploits for the buffer overflow issues. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
Most of these issues do not require an exploit application to trigger them.
Currently we are not aware of any exploits for the buffer overflow issues. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
Solution / Fix
NCP Secure Client Multiple Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
References
NCP Secure Client Multiple Vulnerabilities
References:
References:
- Vendor Homepage (NCP Network Communication)
- NCP VPN/PKI Client - various Bugs (Ramon 'ports' Kukla