Description
NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to cause a denial of service (memory usage and cpu utilization) via a flood of arbitrary UDP datagrams to ports 0 to 65000. NOTE: this issue was reported as a buffer overflow, but that term usually does not apply in flooding attacks.
References
- 16906 vdb-entry
- 20060301 NCP VPN/PKI Client - various Bugs mailing-list
- ncp-udp-dos(25249) vdb-entry
- 19082 third-party-advisory
- 20060301 NCP VPN/PKI Client - various Bugs mailing-list