4 results (0.017 seconds)

CVSS: 9.8EPSS: 5%CPEs: 3EXPL: 0

23 Feb 2011 — The XML Security Database Parser class in the XMLSecDB ActiveX control in the HIPSEngine component in the Management Server before 8.1.0.88, and the client before 1.6.450, in CA Host-Based Intrusion Prevention System (HIPS) 8.1, as used in CA Internet Security Suite (ISS) 2010, allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via vectors involving the SetXml and Save methods. La clase XML Security Database Parser en el control XMLSecDB ActiveX en el c... • http://secunia.com/advisories/43377 •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

19 Aug 2009 — kmxIds.sys before 7.3.1.18 in CA Host-Based Intrusion Prevention System (HIPS) 8.1 allows remote attackers to cause a denial of service (system crash) via a malformed packet. kmxIds.sys anteriores a v7.3.1.18 en CA Host-Based Intrusion Prevention System (HIPS) v8.1 permite a atacantes remotos producir una denegación de servicio (caída de sistema) a través de un paquete malformado. • http://www.securityfocus.com/archive/1/505881/100/0/threaded • CWE-399: Resource Management Errors •

CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 0

12 Aug 2008 — The kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, does not properly verify IOCTL requests, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted request. El Controlador kmxfw.sys en el Sistema de prevención de intrusiones basado en Host (Host-Based Intrusion Prevention System) r8 (HIPS-r8), como el utilizado en CA Internet Security Suite and Personal Firewall, no v... • http://secunia.com/advisories/31434 • CWE-20: Improper Input Validation •

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 3

24 Jan 2007 — Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4.31 and (2) Firewall kmxfw.sys 6.5.4.10 allow local users to gain privileges by using certain privileged IOCTLs to modify callback function pointers. Los controladores del Computer Associates Host Intrusion Prevention System (HIPS) (1) Core kmxstart.sys 6.5.4.31 y (2) Firewall kmxfw.sys 6.5.4.10 permite a usuarios locales la obtención de privilegios mediante el uso de ciertos IOCTLs confidenciales para modificar l... • https://www.exploit-db.com/exploits/29069 •