Ca Host-Based Intrusion Prevention System vulnerabilities

3 CVEs affecting Ca Host-Based Intrusion Prevention System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-1036, published 2011-02-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-1036, published 2011-02-25. High severity, CVSS 8.8. EPSS: 2.5% chance of exploitation in the next 30 days. The XML Security Database Parser class in the XMLSecDB ActiveX control in the HIPSEngine component in the Management Server before 8.1.0.88, and the client before 1.6.450, in CA Host-Based Intrusion…
CVE-2009-2740, published 2009-08-19. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. kmxIds.sys before 7.3.1.18 in CA Host-Based Intrusion Prevention System (HIPS) 8.1 allows remote attackers to cause a denial of service (system crash) via a malformed packet.
CVE-2006-6952, published 2007-01-24. High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days. Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4.31 and (2) Firewall kmxfw.sys 6.5.4.10 allow local users to gain privileges by using certain privileged…