CVE-2006-6952
First published: Wed Jan 24 2007(Updated: )
Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4.31 and (2) Firewall kmxfw.sys 6.5.4.10 allow local users to gain privileges by using certain privileged IOCTLs to modify callback function pointers.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| CA Host-Based Intrusion Prevention System | =firewall_6.5.4.10 | |
| CA Host-Based Intrusion Prevention System | =core_6.5.4.31 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/archive/1/452286/100/0/threaded
- http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=38
- http://www.securityfocus.com/bid/21140
- http://secunia.com/advisories/22972
- http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34818
- http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?cid=97729
- http://www.osvdb.org/30497
- http://www.osvdb.org/30498
- http://www.securityfocus.com/archive/1/458040/100/200/threaded
- http://www.securityfocus.com/archive/1/451952/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2006-6952?
CVE-2006-6952 is considered a high severity vulnerability due to its potential for privilege escalation by local users.
How do I fix CVE-2006-6952?
To mitigate CVE-2006-6952, upgrade to the latest versions of Host Intrusion Prevention System Core 6.5.4.31 and Firewall 6.5.4.10 that have addressed this vulnerability.
Who is affected by CVE-2006-6952?
Local users with access to the Computer Associates Host Intrusion Prevention System Core 6.5.4.31 and Firewall 6.5.4.10 are affected by CVE-2006-6952.
What systems are impacted by CVE-2006-6952?
CVE-2006-6952 impacts systems running CA Host-Based Intrusion Prevention System versions core 6.5.4.31 and firewall 6.5.4.10.
What type of vulnerability is CVE-2006-6952?
CVE-2006-6952 is a privilege escalation vulnerability related to improper handling of IOCTLs in HIPS drivers.
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/author
- agent/description
- agent/first-publish-date
- agent/tags
- agent/event
- agent/source
- vendor/ca
- canonical/ca host-based intrusion prevention system
- version/ca host-based intrusion prevention system/firewall_6.5.4.10
- version/ca host-based intrusion prevention system/core_6.5.4.31