PT-2011-2827 · Ca · Ca Host-Based Intrusion Prevention System+1

Published 2011-02-23 · Updated 2018-10-09 · CVE-2011-1036

Positive Technologies (AI Summary)

CVSS v2.0

8.8

High

Base vector

AV:N/AC:M/Au:N/C:N/I:C/A:C

Name of the Vulnerable Software and Affected Versions CA Host-Based Intrusion Prevention System (HIPS) versions prior to 8.1.0.88 CA Internet Security Suite (ISS) 2010 versions prior to 1.6.450

Description The issue allows remote attackers to download and execute an arbitrary program onto a client machine. This is achieved through vectors involving the SetXml and Save methods of the XML Security Database Parser class in the HIPSEngine component.

Recommendations For CA Host-Based Intrusion Prevention System (HIPS) versions prior to 8.1.0.88, update to version 8.1.0.88 or later. For CA Internet Security Suite (ISS) 2010 versions prior to 1.6.450, update to version 1.6.450 or later.

Fix

Related Identifiers

CVE-2011-1036

ZDI-11-093

Affected Products

Ca Host-Based Intrusion Prevention System

Ca Internet Security Suite

References · 13

• https://zerodayinitiative.com/advisories/ZDI-11-093 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2011-1036 · Security Note
• https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7B53A608DF-BFDB-4AB3-A98F-E4BB6BC7A2F4%7D · Note
• http://securityfocus.com/bid/46539 · Note
• http://securityreason.com/securityalert/8106 · Note
• http://zerodayinitiative.com/advisories/ZDI-11-093 · Note
• http://secunia.com/advisories/43490 · Note
• http://securitytracker.com/id?1025120 · Note
• http://secunia.com/advisories/43377 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65632 · Note
• http://securityfocus.com/archive/1/516687/100/0/threaded · Note
• http://vupen.com/english/advisories/2011/0496 · Note
• http://securityfocus.com/archive/1/516649/100/0/threaded · Note