CVE-2009-0682
Severity Score
2.1
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
vetmonnt.sys in CA Internet Security Suite r3, vetmonnt.sys before 9.0.0.184 in Internet Security Suite r4, and vetmonnt.sys before 10.0.0.217 in Internet Security Suite r5 do not properly verify IOCTL calls, which allows local users to cause a denial of service (system crash) via a crafted call.
vetmonnt.sys en CA Internet Security Suite r3, vetmonnt.sys anteriores a v9.0.0.184 en Internet Security Suite r4, y vetmonnt.sys anteriores a v10.0.0.217 en Internet Security Suite r5 no verifica adecuadamente las llamadas IOCTL, lo que permite a usuarios locales producir una denegación de servicio ( caída de sistema) a través de una llamada manipulada.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2009-02-22 CVE Reserved
- 2009-08-18 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
CAPEC
References (5)
| URL | Tag | Source |
|---|---|---|
| http://en.securitylab.ru/lab/PT-2009-05 | X_refsource_misc | |
| http://osvdb.org/57228 | Vdb Entry | |
| http://www.securityfocus.com/archive/1/505880/100/0/threaded | Mailing List | |
| http://www.securityfocus.com/archive/1/506103/100/0/threaded | Mailing List |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=214673 | 2018-10-10 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Ca Search vendor "Ca" | Internet Security Suite Search vendor "Ca" for product "Internet Security Suite" | * | r3 |
Affected
| ||||||
| Ca Search vendor "Ca" | Internet Security Suite Search vendor "Ca" for product "Internet Security Suite" | 9.0.0.184 Search vendor "Ca" for product "Internet Security Suite" and version "9.0.0.184" | r4, 32bit |
Affected
| ||||||
| Ca Search vendor "Ca" | Internet Security Suite Search vendor "Ca" for product "Internet Security Suite" | 10.0.0.217 Search vendor "Ca" for product "Internet Security Suite" and version "10.0.0.217" | r5, 32bit |
Affected
| ||||||