Back
CVE-2006-6952
Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4.31 and (2) Firewall kmxfw.sys 6.5.4.10…
High7.2EPSS 1.1%
- Published
- Updated
- Reserved
- Assigned by
- mitre
Description
Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4.31 and (2) Firewall kmxfw.sys 6.5.4.10 allow local users to gain privileges by using certain privileged IOCTLs to modify callback function pointers.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 2.0 | High7.2 | AV:L/AC:L/Au:N/C:C/I:C/A:C |
- EPSS (exploitation in 30 days)
- 1.1% · top 35% of all CVEs (4 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.2.
Weakness
- n/a
Affected products
n/a
- affected n/a
References (10)
- http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?cid=97729 (opens in a new tab)x_refsource_CONFIRMx_transferred
- 20061121 RE: [Reversemode advisory] Computer Associates HIPS Drivers - multiple local privilege escalation vulnerabilities. (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 21140 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- 30497 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 20061116 [Reversemode advisory] Computer Associates HIPS Drivers - multiple local privilege escalation vulnerabilities. (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 22972 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 30498 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34818 (opens in a new tab)x_refsource_CONFIRMx_transferred
- 20070124 [CAID 34818]: CA Personal Firewall Multiple Privilege Escalation Vulnerabilities (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=38 (opens in a new tab)x_refsource_MISCx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2006-6952)Record last updated .