Unscored severity · published Jan 24, 2007
CVE-2006-6952
Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4.31 and (2) Firewall kmxfw.sys 6.5.4.10 allow local users to gain privileges by…
–
CVSS
1.1%
EPSS
No
On KEV
Description
Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4.31 and (2) Firewall kmxfw.sys 6.5.4.10 allow local users to gain privileges by using certain privileged IOCTLs to modify callback function pointers.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HI
Host-based Intrusion Prevention System · CA
core_6.5.4.31; firewall_6.5.4.10 · source: NVD
Affected product
HI
Host-based Intrusion Prevention System
CA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-6952
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-6952
Vendor Advisory
http://secunia.com/advisories/22972
www.osvdb.org
http://www.osvdb.org/30497
www.osvdb.org
http://www.osvdb.org/30498
www.reversemode.com
http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=38
www.securityfocus.com
http://www.securityfocus.com/archive/1/451952/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/452286/100/0/threaded
More from Host-based Intrusion Prevention System
–
CVE-2011-1036
The XML Security Database Parser class in the XMLSecDB ActiveX control in the HIPSEngine component in the Management Server before 8.1.0.88, and the client before 1.6.450, in CA…
–
CVE-2009-2740
kmxIds.sys before 7.3.1.18 in CA Host-Based Intrusion Prevention System (HIPS) 8.1 allows remote attackers to cause a denial of service (system crash) via a malformed packet
–
CVE-2008-2926
The kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, does not properly verify IOCTL requests,…