CVE-2008-2926 The kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, does not properly verify IOCTL requests, which allows local us...
HighCVSS 7.2
EPSS 0.42%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, does not properly verify IOCTL requests, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom internet security suite | = 3.0 | No fix listed |
| ca host based intrusion prevention system | = r8 | No fix listed |
| ca internet security suite 2008 | All versions | No fix listed |
| ca personal firewall 2007 | All versions | No fix listed |
| ca personal firewall 2008 | All versions | No fix listed |
References
- 31434 patch third-party-advisory vendor-advisory
- www.ca.com
- 20080812 CA Host-Based Intrusion Prevention System SDK kmxfw.sys Multiple Vulnerabilities mailing-list
- 30651 vdb-entry
- 1020658 vdb-entry
- 1020659 vdb-entry
- 1020660 vdb-entry
- ADV-2008-2339 vdb-entry
- ca-kmxfw-privilege-escalation(44392) vdb-entry