CVE-2006-6952 Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4.31 and (2) Firewall kmxfw.sys 6.5.4.10 allow local users to gain privileges by using certain privileged....
HighCVSS 7.2
EPSS 1.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4.31 and (2) Firewall kmxfw.sys 6.5.4.10 allow local users to gain privileges by using certain privileged IOCTLs to modify callback function pointers.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ca host-based intrusion prevention system | = core_6.5.4.31 | No fix listed |
| ca host-based intrusion prevention system | = firewall_6.5.4.10 | No fix listed |
References
- 22972 third-party-advisory vendor-advisory
- 30497 vdb-entry
- 30498 vdb-entry
- www.reversemode.com
- 20061116 [Reversemode advisory] Computer Associates HIPS Drivers - multiple local privilege escalation vulnerabilities. mailing-list
- 20061121 RE: [Reversemode advisory] Computer Associates HIPS Drivers - multiple local privilege escalation vulnerabilities. mailing-list
- 20070124 [CAID 34818]: CA Personal Firewall Multiple Privilege Escalation Vulnerabilities mailing-list
- 21140 exploit vdb-entry
- www3.ca.com
- www3.ca.com