NetSight
IP …
high7.2

CVE-2008-2926

The kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, does not properly ver…

Impact

The kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, does not properly verify IOCTL requests, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted request.

Affected products

VendorProductAffected versions
BroadcomInternet Security Suite
Version 3.0
CaHost Based Intrusion Prevention System
Version r8
CaInternet Security Suite 2008
All versions
CaPersonal Firewall 2007
All versions
CaPersonal Firewall 2008
All versions

Weakness classification

CWE-20

References