NCP Network Communication Secure Client 8.11 Build 146 and possibly other versions allows local users to bypass security protections and configure privileged options via a long argument to ncpmon.exe which provides access to alternate privileged menus possibly due to a buffer overflow.