Ca Host Based Intrusion Prevention System vulnerabilities

3 vulnerabilities

Known vulnerabilities in Ca Host Based Intrusion Prevention System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2011-1036cahost-based_intrusion_prevention_system
EPSS score
2.55%
The XML Security Database Parser class in the XMLSecDB ActiveX control in the HIPSEngine component in the Management Server before 8.1.0.88, and the client before 1.6.450, in CA Host-Based Intrusion Prevention System (HIPS) 8.1, as used in CA Internet Security Suite (ISS) 2010, allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via vectors involving the SetXml and Save methods.5CVE-2009-2740cahost-based_intrusion_prevention_system
EPSS score
1.62%
kmxIds.sys before 7.3.1.18 in CA Host-Based Intrusion Prevention System (HIPS) 8.1 allows remote attackers to cause a denial of service (system crash) via a malformed packet.7.2CVE-2006-6952cahost-based_intrusion_prevention_system
EPSS score
1.05%
Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4.31 and (2) Firewall kmxfw.sys 6.5.4.10 allow local users to gain privileges by using certain privileged IOCTLs to modify callback function pointers.