CVE-2006-0964: Client Firewall in NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, all...

Security readout for executives and security teams

This CVE describes a way for a local user to bypass NCP Secure Client firewall program rules by swapping an approved program for another executable. Business impact depends on whether this legacy VPN/PKI client is still deployed. It weakens endpoint firewall enforcement but is not described as remote compromise. Exposure is most likely on endpoints still running NCP Network Communication Secure Client 8.11 Build 146 or related unconfirmed versions. Organizations that retired this legacy client are unlikely to be exposed. Confirm through software inventory, VPN client management records, and endpoint package data. Prioritize if this client is still used on managed endpoints, especially where client firewall rules enforce security boundaries. If inventory shows no deployment, risk is low. The main action is exposure confirmation because source data lacks severity scoring and patch detail. Mitigation focus: Identify endpoints running NCP Secure Client 8.11 Build 146 or nearby versions.; Check NCP or vendor guidance for fixed versions or supported upgrade paths.; Limit write access to directories containing firewall-allowed executables..

Prepared

Jun 29, 2026, 14:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.