CVE-2010-5203: Ncp-E Secure Client

Medium severity, CVSS 6.9. EPSS: 0.3% chance of exploitation in the next 30 days.

Multiple untrusted search path vulnerabilities in NCP Secure Enterprise Client before 9.21 Build 68, Secure Entry Client before 9.23 Build 18, and Secure Client - Juniper Edition before 9.23 Build 18 allow local users to gain privileges via a Trojan horse (1) dvccsabase002.dll, (2) conman.dll, (3) kmpapi32.dll, or (4) ncpmon2.dll file in the current working directory, as demonstrated by a directory that contains a .pcf or .spd file. NOTE: some of these details are obtained from third party information.

Affected products

• Ncp-E Secure Client: up to and including 9.23
• Ncp-E Secure Enterprise Client: up to and including 9.21
• Ncp-E Secure Entry Client: up to and including 9.23

Published 2012-09-06. Last modified 2026-06-16.