CVE-2006-0967

NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to cause a denial of service (memory usage and cpu utilization) via a flood of arbitrary UDP datagrams to ports 0 to 65000. NOTE: this issue was reported as a buffer overflow, but that term usually does not apply in flooding attacks.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

2006-03-02

Last modified

2024-08-07

Weaknesses

CWE-399

Affected products

• Secure Client (Ncp Network Communications)

References

• http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042640.html
• http://secunia.com/advisories/19082
• http://www.securityfocus.com/archive/1/426480/100/0/threaded
• http://www.securityfocus.com/bid/16906
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25249