CVE-2006-6952: Ca Host-Based Intrusion Prevention System

High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days.

Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4.31 and (2) Firewall kmxfw.sys 6.5.4.10 allow local users to gain privileges by using certain privileged IOCTLs to modify callback function pointers.

Affected products

• Ca Host-Based Intrusion Prevention System: version core_6.5.4.31 only; version firewall_6.5.4.10 only

Published 2007-01-24. Last modified 2026-06-16.