PT-2006-7100 · Ca · Ca Internet Security Suite 2007+2

Published 2006-12-13 · Updated 2021-04-09 · CVE-2006-6496

Positive Technologies (AI Summary)

CVSS v2.0

6.6

Medium

Base vector

AV:L/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CA Anti-Virus 2007 version 8.1 CA Anti-Virus for Vista Beta version 8.2 CA Internet Security Suite 2007 version 3.0

Description The issue arises from the improper handling of NULL buffers by the VetMONNT.sys and VetFDDNT.sys drivers, allowing local users with administrative access to cause a system crash via certain IOCTLs. This can lead to a denial of service.

Recommendations For CA Anti-Virus 2007 version 8.1, update the VetMONNT.sys and VetFDDNT.sys drivers to properly handle NULL buffers. For CA Anti-Virus for Vista Beta version 8.2, update the VetMONNT.sys and VetFDDNT.sys drivers to properly handle NULL buffers. For CA Internet Security Suite 2007 version 3.0, update the VetMONNT.sys and VetFDDNT.sys drivers to properly handle NULL buffers.

Fix

Related Identifiers

CVE-2006-6496

Affected Products

Ca Anti-Virus 2007

Ca Anti-Virus For Vista Beta

Ca Internet Security Suite 2007

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2006-6496 · Security Note
• http://osvdb.org/30845 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30909 · Note
• http://securitytracker.com/id?1017382 · Note
• http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34870 · Note
• http://securityfocus.com/bid/21593 · Note
• http://reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=41 · Note
• http://crm.my-etrust.com/CIDocument.asp?KDId=2651&GUID=9FD7E4F8362C4A168D88B4FFA34DCB4C · Note
• http://secunia.com/advisories/23378 · Note
• http://securitytracker.com/id?1017381 · Note
• https://t.me/cvenotify/13000 · Telegram Post
• http://vupen.com/english/advisories/2006/5010 · Note
• http://securityfocus.com/archive/1/454420/100/0/threaded · Note