National Cyber-Alert System

Vulnerability Summary for CVE-2006-6952

Overview

Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4.31 and (2) Firewall kmxfw.sys 6.5.4.10 allow local users to gain privileges by using certain privileged IOCTLs to modify callback function pointers.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: BID

Name: 21140

Hyperlink:http://www.securityfocus.com/bid/21140

External Source: BUGTRAQ

Name: 20061116 [Reversemode advisory] Computer Associates HIPS Drivers - multiple local privilege escalation vulnerabilities.

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/451952/100/0/threaded

External Source: BUGTRAQ

Name: 20061121 RE: [Reversemode advisory] Computer Associates HIPS Drivers - multiple local privilege escalation vulnerabilities.

Hyperlink:http://www.securityfocus.com/archive/1/452286/100/0/threaded

External Source: MISC

Name: http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=38

Hyperlink:http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=38

External Source: SECUNIA

Name: 22972

Type: Advisory

Hyperlink:http://secunia.com/advisories/22972

External Source: CONFIRM

Name: http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34818

Hyperlink:http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34818

External Source: CONFIRM

Name: http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?cid=97729

Hyperlink:http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?cid=97729

External Source: BUGTRAQ

Name: 20070124 [CAID 34818]: CA Personal Firewall Multiple Privilege Escalation Vulnerabilities

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/458040/100/200/threaded

External Source: OSVDB

Name: 30498

Hyperlink:http://www.osvdb.org/30498

External Source: OSVDB

Name: 30497

Hyperlink:http://www.osvdb.org/30497