CVE:CVE-2010-5203
CNNVD:CNNVD-201209-043
NCP Secure Enterprise Client 9.21 Build 68之前版本、Secure Entry Client 9.23 Build 18之前版本以及Secure Client - Juniper Edition 9.23 Build 18之前版本中存在多个不可信搜索路径漏洞。本地攻击者可利用这些漏洞通过当前目录（如包含.pcf或.spd文件的目录）下的Trojan木马(1)dvccsabase002.dll(2)conman.dll(3)kmpapi32.dll或(4)ncpmon2.dll文件，获取特权。
solution:Upgrade ncp-e secure_client to a higher version than 9.23,and avoid the version (,9.23]; Upgrade ncp-e secure_enterprise_client to a higher version than 9.21,and avoid the version (,9.21]; Upgrade ncp-e secure_entry_client to a higher version than 9.23,and avoid the version (,9.23]