Unspecified vulnerability in the kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, allows remote attackers to cause a denial of service via unknown vectors, related to "insufficient validation."
Vendor
computer associates vulnerabilities
5 published CVES affecting computer associates, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 5
- Critical
- 0
- High
- 4
- Medium
- 1
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
- desktop management suite 4
- arcserve backup laptops and desktops 3
- brightstor arcserve backup laptops desktops 1
- desktop and server management 1
- host based intrusion prevention system 1
- internet security suite 1
- personal firewall 1
- unicenter asset management 1
- unicenter desktop management bundle 1
- unicenter dsm r11 list control atx 1
- unicenter remote control 1
- unicenter software delivery 1
Latest computer associates CVEs
Newest publication first
-
MediumCVSS 5.0 EPSS 2.0%
-
HighCVSS 9.3 EPSS 6.8%
The DSM gui_cm_ctrls ActiveX control (gui_cm_ctrls.ocx), as used in multiple CA products including BrightStor ARCServe Backup for Laptops and Desktops r11.5, Desktop Management Suite r11.1 through r11.2 C2; Unicenter r11.1 through r11.2 C2; and Desktop and Server Management r11.1...
-
HighCVSS 10.0 EPSS 5.9%
Unspecified vulnerability in the NetBackup service in CA ARCserve Backup for Laptops and Desktops r11.0 through r11.5, and Suite 11.1 and 11.2, allows remote attackers to execute arbitrary commands, related to "insufficient verification of file uploads."
-
HighCVSS 9.3 EPSS 23.6%
Buffer overflow in the LGServer service in CA ARCserve Backup for Laptops and Desktops r11.0 through r11.5, and Suite 11.1 and 11.2, allows remote attackers to execute arbitrary code via unspecified "command arguments."
-
HighCVSS 9.3 EPSS 40.3% Framework module Public exploit
Stack-based buffer overflow in the ListCtrl ActiveX Control (ListCtrl.ocx), as used in multiple CA products including BrightStor ARCserve Backup R11.5, Desktop Management Suite r11.1 through r11.2, and Unicenter products r11.1 through r11.2, allows remote attackers to execute arb...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.