CVE-2006-6952 in Personal Firewall

Summary

Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4.31 and (2) Firewall kmxfw.sys 6.5.4.10 allow local users to gain privileges by using certain privileged IOCTLs to modify callback function pointers.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 01/24/2007
• Disclosure: 01/24/2007
• Moderation: VulDB entry created
• Entries: VDB-84847 (2)
• CPE: ready
• CWE: CWE-269 (Confirmed)
• Exploit: Download
• CVSS: 8.4
• EPSS: 0.00285
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2006-6952
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2006-6952
• CVE Details: https://www.cvedetails.com/cve/CVE-2006-6952/