CVE-2008-3174

2008-08-1223:41:00

[email protected]

web.nvd.nist.gov

hips

vulnerability

denial of service

nvd

cve-2008-3174

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.5 Medium

AI Score

Confidence

High

0.037 Low

EPSS

Percentile

91.8%

JSON

Unspecified vulnerability in the kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, allows remote attackers to cause a denial of service via unknown vectors, related to “insufficient validation.”

Affected configurations

NVD

Node

computer_associateshost_based_intrusion_prevention_systemMatchr8

computer_associatesinternet_security_suiteMatch2007

computer_associatesinternet_security_suiteMatch2008

computer_associatespersonal_firewallMatch2007

computer_associatespersonal_firewallMatch2008

CPENameOperatorVersion
computer_associates:host_based_intrusion_prevention_systemcomputer associates host based intrusion prevention systemeqr8
computer_associates:internet_security_suitecomputer associates internet security suiteeq2007
computer_associates:internet_security_suitecomputer associates internet security suiteeq2008
computer_associates:personal_firewallcomputer associates personal firewalleq2007
computer_associates:personal_firewallcomputer associates personal firewalleq2008

CPE	Name	Operator	Version
computer_associates:host_based_intrusion_prevention_system	computer associates host based intrusion prevention system	eq	r8
computer_associates:internet_security_suite	computer associates internet security suite	eq	2007
computer_associates:internet_security_suite	computer associates internet security suite	eq	2008
computer_associates:personal_firewall	computer associates personal firewall	eq	2007
computer_associates:personal_firewall	computer associates personal firewall	eq	2008