Description
NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to bypass security protections and configure privileged options via a long argument to ncpmon.exe, which provides access to alternate privileged menus, possibly due to a buffer overflow.
References
- 16906 vdb-entry
- ncp-ncpmon-bo(25243) vdb-entry
- 20060301 NCP VPN/PKI Client - various Bugs mailing-list
- 19082 third-party-advisory
- 20060301 NCP VPN/PKI Client - various Bugs mailing-list