Unscored severity · published Feb 25, 2011
CVE-2011-1036
The XML Security Database Parser class in the XMLSecDB ActiveX control in the HIPSEngine component in the Management Server before 8.1.0.88, and the client before 1.6.450, in CA…
–
CVSS
2.5%
EPSS
No
On KEV
Description
The XML Security Database Parser class in the XMLSecDB ActiveX control in the HIPSEngine component in the Management Server before 8.1.0.88, and the client before 1.6.450, in CA Host-Based Intrusion Prevention System (HIPS) 8.1, as used in CA Internet Security Suite (ISS) 2010, allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via vectors involving the SetXml and Save methods.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.5% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HI
Host-based Intrusion Prevention System · CA
8.1 · source: NVD
IS
Internet Security Suite 2010 · CA
All versions, or not specified · source: NVD
IS
Internet Security Suite 2011 · CA
All versions, or not specified · source: NVD
Affected product
HI
Host-based Intrusion Prevention System
CA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-1036
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-1036
secunia.com
http://secunia.com/advisories/43377
secunia.com
http://secunia.com/advisories/43490
securityreason.com
http://securityreason.com/securityalert/8106
www.securityfocus.com
http://www.securityfocus.com/archive/1/516649/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/516687/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/46539
More from Host-based Intrusion Prevention System
–
CVE-2009-2740
kmxIds.sys before 7.3.1.18 in CA Host-Based Intrusion Prevention System (HIPS) 8.1 allows remote attackers to cause a denial of service (system crash) via a malformed packet
–
CVE-2008-2926
The kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, does not properly verify IOCTL requests,…
–
CVE-2006-6952
Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4.31 and (2) Firewall kmxfw.sys 6.5.4.10 allow local users to gain privileges by…