Unscored severity · published Aug 19, 2009
CVE-2009-2740
kmxIds.sys before 7.3.1.18 in CA Host-Based Intrusion Prevention System (HIPS) 8.1 allows remote attackers to cause a denial of service (system crash) via a malformed packet
–
CVSS
1.6%
EPSS
No
On KEV
Description
kmxIds.sys before 7.3.1.18 in CA Host-Based Intrusion Prevention System (HIPS) 8.1 allows remote attackers to cause a denial of service (system crash) via a malformed packet.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HI
Host-based Intrusion Prevention System · CA
8.1 · source: NVD
Affected product
HI
Host-based Intrusion Prevention System
CA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-2740
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-2740
www.securityfocus.com
http://www.securityfocus.com/archive/1/505881/100/0/threaded
Patch
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=214665
More from Host-based Intrusion Prevention System
–
CVE-2011-1036
The XML Security Database Parser class in the XMLSecDB ActiveX control in the HIPSEngine component in the Management Server before 8.1.0.88, and the client before 1.6.450, in CA…
–
CVE-2008-2926
The kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, does not properly verify IOCTL requests,…
–
CVE-2006-6952
Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4.31 and (2) Firewall kmxfw.sys 6.5.4.10 allow local users to gain privileges by…