CVE-2006-6952

HIGH 7.2CVE-2006-6952 · Published 24/01/2007 · updated 16/06/2026

In short

CVE-2006-6952 is a HIGH (CVSS 7.2) vulnerability affecting host-based intrusion prevention system (ca).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 64.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
host-based intrusion prevention system ca	`= core_6.5.4.31= firewall_6.5.4.10`	No fix yet

Description

Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4.31 and (2) Firewall kmxfw.sys 6.5.4.10 allow local users to gain privileges by using certain privileged IOCTLs to modify callback function pointers.

References

secunia.com/advisories/22972 · Vendor Advisory
osvdb.org/30497
osvdb.org/30498
reversemode.com/index.php
securityfocus.com/archive/1/451952/100/0/threaded
securityfocus.com/archive/1/452286/100/0/threaded
securityfocus.com/archive/1/458040/100/200/threaded
securityfocus.com/bid/21140 · Exploit
www3.ca.com/securityadvisor/newsinfo/collateral.aspx
www3.ca.com/securityadvisor/vulninfo/vuln.aspx

More vulnerabilities in host-based intrusion prevention system

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free