vulnwire
7.2high

CVE-2006-69522 exploits

Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4.31 and (2) Firewall kmxfw.sys 6.5.4.10 allo…

Published 19 y ago · modified 4 mo ago · JSON

CVSS
7.2
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.1%
percentile 65%
Public exploits
2
Exploit-DB

Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4.31 and (2) Firewall kmxfw.sys 6.5.4.10 allow local users to gain privileges by using certain privileged IOCTLs to modify callback function pointers.

Exploit prediction (EPSS)

1.06% probability of exploitation in the next 30 days, higher than 65% of all scored CVEs.

Exploits and detections

  • EDB-29070 Computer Associates Personal Firewall 9.0 - HIPS Driver 'kmxstart.sys' Local Privilege Escalation · local · 2006-11-16
  • EDB-29069 Computer Associates Personal Firewall 9.0 - HIPS Driver 'kmxfw.sys' Local Privilege Escalation · local · 2006-11-16

CVSS scores

Assigned byVersionScoreVector
NVD2.07.2AV:L/AC:L/Au:N/C:C/I:C/A:C

References

  • www3.ca.com /securityadvisor/newsinfo/collateral.aspx?cid=97729 · x_refsource_CONFIRM, x_transferred
  • securityfocus.com /archive/1/452286/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityfocus.com /bid/21140 · vdb-entry, x_refsource_BID, x_transferred
  • osvdb.org /30497 · vdb-entry, x_refsource_OSVDB, x_transferred
  • securityfocus.com /archive/1/451952/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • secunia.com /advisories/22972 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • osvdb.org /30498 · vdb-entry, x_refsource_OSVDB, x_transferred
  • www3.ca.com /securityadvisor/vulninfo/vuln.aspx?id=34818 · x_refsource_CONFIRM, x_transferred
  • securityfocus.com /archive/1/458040/100/200/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • reversemode.com /index.php?option=com_remository&Itemid=2&func=fileinfo&id=38 · x_refsource_MISC, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.