{"id":"CVE-2006-6952","aliases":["EUVD-2006-6935","GHSA-v47f-fhww-m8gv"],"status":"published","title":"Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4...","description":"Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4.31 and (2) Firewall kmxfw.sys 6.5.4.10 allow local users to gain privileges by using certain privileged IOCTLs to modify callback function pointers.","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01062,"percentile":0.64814,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2007-01-24T23:00:00Z","modified":"2026-06-16T22:34:06Z","exploits":[{"source":"exploitdb","id":"EDB-29069","title":"Computer Associates Personal Firewall 9.0 - HIPS Driver 'kmxfw.sys' Local Privilege Escalation","type":"local","platform":"windows","date":"2006-11-16","verified":true,"url":"https://www.exploit-db.com/exploits/29069"},{"source":"exploitdb","id":"EDB-29070","title":"Computer Associates Personal Firewall 9.0 - HIPS Driver 'kmxstart.sys' Local Privilege Escalation","type":"local","platform":"windows","date":"2006-11-16","verified":true,"url":"https://www.exploit-db.com/exploits/29070"}],"products":[{"vendor":"ca","product":"host-based_intrusion_prevention_system"}],"references":[{"url":"http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?cid=97729","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/452286/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.securityfocus.com/bid/21140","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"http://www.osvdb.org/30497","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/451952/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://secunia.com/advisories/22972","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.osvdb.org/30498","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34818","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/458040/100/200/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.reversemode.com/index.php?option=com_remository\u0026Itemid=2\u0026func=fileinfo\u0026id=38","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-6952"},{"url":"https://github.com/advisories/GHSA-v47f-fhww-m8gv"}],"sources":{"cve":[{"id":"CVE-2006-6952","description":"Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4.31 and (2) Firewall kmxfw.sys 6.5.4.10 allow local users to gain privileges by using certain privileged IOCTLs to modify callback function pointers.","status":"published","published":"2007-01-24T23:00:00Z","modified":"2024-08-07T20:50:05.694Z","updated_at":"2026-11-02T14:33:50.738595Z"}],"euvd":[{"id":"EUVD-2006-6935","description":"Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4.31 and (2) Firewall kmxfw.sys 6.5.4.10 allow local users to gain privileges by using certain privileged IOCTLs to modify callback function pointers.","status":"published","published":"2007-01-24T23:00:00Z","modified":"2024-08-07T20:50:05Z","updated_at":"2026-11-03T01:15:41.107436Z"}],"ghsa":[{"id":"GHSA-v47f-fhww-m8gv","title":"Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4...","description":"Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4.31 and (2) Firewall kmxfw.sys 6.5.4.10 allow local users to gain privileges by using certain privileged IOCTLs to modify callback function pointers.","status":"published","published":"2022-05-01T07:43:13Z","modified":"2023-01-31T05:02:43Z","updated_at":"2026-11-02T14:48:19.401331Z"}],"nvd":[{"id":"CVE-2006-6952","description":"Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4.31 and (2) Firewall kmxfw.sys 6.5.4.10 allow local users to gain privileges by using certain privileged IOCTLs to modify callback function pointers.","status":"published","published":"2007-01-24T23:28:00Z","modified":"2026-06-16T22:34:06.677Z","cvss":[{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:10.726159Z"}]}}