CVE-2006-6952

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4.31 and (2) Firewall kmxfw.sys 6.5.4.10 allow local users to gain privileges by using certain privileged IOCTLs to modify callback function pointers.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: Jan 24, 2007
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2006

CVE-2006-69532.1The virtual keyboard implementation in GlobeTrotter Mobility Manager changes the color of a key as it is pressed, which allows local users t CVE-2006-69544.3Flock beta 1 0.7 allows remote attackers to cause a denial of service (application crash) via a web page that contains a large number of nes CVE-2006-69554.3Opera allows remote attackers to cause a denial of service (application crash) via a web page that contains a large number of nested marquee CVE-2006-69564.3Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via a web page that contains a large number of nest CVE-2006-69576.8PHP remote file inclusion vulnerability in addons/mod_media/body.php in Docebo 3.0.3 and earlier, when register_globals is enabled, allows r CVE-2006-69587.5Multiple PHP remote file inclusion vulnerabilities in phpBlueDragon 2.9.1 allow remote attackers to execute arbitrary PHP code via a URL in CVE-2006-69594.6WebRoot Spy Sweeper 4.5.9 and earlier allows local users to bypass the "Startup-Shield" security restrictions by modifying certain registry CVE-2006-69606.8The Compression Sweep feature in WebRoot Spy Sweeper 4.5.9 and earlier does not handle non-ZIP archives, which allows remote attackers to by CVE-2006-69616.8WebRoot Spy Sweeper 4.5.9 and earlier does not detect malware based on file contents, which allows remote attackers to bypass malware detect CVE-2006-69626.8PHP remote file inclusion vulnerability in rsgallery2.html.php in the RS Gallery2 component (com_rsgallery2) 1.11.2 for Joomla! allows attac CVE-2006-69637.5Multiple PHP remote file inclusion vulnerabilities in Docebo LMS 3.0.3 allow remote attackers to execute arbitrary PHP code via a URL in the CVE-2006-69644.0MailEnable Professional before 1.78 provides a cleartext user password when an administrator edits the user's settings, which allows remote