NVD

Id
2820  
Name
CVE-2008-2926  
Description
The kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, does not properly verify IOCTL requests, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted request.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-08-12  
Modified Date
2011-03-07  
Seq
2008-2926  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
17762 2820 CVE-2008-2926 http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=36559  View
17763 2820 CVE-2008-2926 20080812 CA Host-Based Intrusion Prevention System SDK kmxfw.sys Multiple Vulnerabilities  View
17764 2820 CVE-2008-2926 30651  View
17765 2820 CVE-2008-2926 1020658  View
17766 2820 CVE-2008-2926 1020659  View
17767 2820 CVE-2008-2926 1020660  View
17768 2820 CVE-2008-2926 ADV-2008-2339  View
17769 2820 CVE-2008-2926 ca-kmxfw-privilege-escalation(44392)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47188 JVNDB-2008-002498 CA Host-Based Intrusion Prevention System の kmxfw.sys ドライバにおける権限を取得される脆弱性 複数の CA 製品などで利用される CA Host-Based Intrusion Prevention System (HIPS) の kmxfw.sys ドライバは、IOCTL リクエストを適切に検証しないため、サービス運用妨害 (DoS) 状態となる、または権限を取得される脆弱性が存在します。 CVE-2008-2926 33039 CVE-2008-2926 2820 7.2 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002498.html 2008-08-12 2010-12-24 View