CVE-2006-3551

NCP Secure Enterprise Client (aka VPN/PKI client) 8.30 Build 59, and possibly earlier versions, when the Link Firewall and Personal Firewall are both configured to block all inbound and outbound network traffic, allows context-dependent attackers to send inbound UDP traffic with source port 67 and destination port 68, and outbound UDP traffic with source port 68 and destination port 67.

CVSS v2.0 1.2 LOW

1.2^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:H/Au:N/C:N/I:P/A:N

Exploitability : 1.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity HIGH

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047547.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/27484

Configurations

Configuration 1 (hide)

cpe:2.3:a:ncp_network_communications:secure_client:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2006-07-13 00:05

Updated : 2024-02-04 16:52

NVD link : CVE-2006-3551

Mitre link : CVE-2006-3551

CVE.ORG link : CVE-2006-3551

JSON object : View

Products Affected

ncp_network_communications

secure_client

CWE

NVD-CWE-Other

{"id": "CVE-2006-3551", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 1.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:H/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "HIGH", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 1.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-07-13T00:05:00.000", "references": [{"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047547.html", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27484", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "NCP Secure Enterprise Client (aka VPN/PKI client) 8.30 Build 59, and possibly earlier versions, when the Link Firewall and Personal Firewall are both configured to block all inbound and outbound network traffic, allows context-dependent attackers to send inbound UDP traffic with source port 67 and destination port 68, and outbound UDP traffic with source port 68 and destination port 67."}, {"lang": "es", "value": "NCP Secure Enterprise Client (tambi\u00e9n conocido como VPN/PKI client) 8.30 Build 59, y posiblemente anteriores versiones, cuando cuando el cortafuegos de enlace y el personal (Link FireWall y Personal FireWall) son ambos configurados para bloquear todo el tr\u00e1fico de red de entrada y salida, permite a atacantes dependientes del contexto enviar tr\u00e1fico UDP de entrada con un puerto fuente 67 y un puerto de destino 68, y tr\u00e1fico de salida UDP con un puerto fuente 68 y puerto de destino 67."}], "lastModified": "2017-07-20T01:32:23.397", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ncp_network_communications:secure_client:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CD90B7C7-3FBF-49A7-8116-EAD65C8965B8", "versionEndIncluding": "8.30_build_59"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}