CVE-2011-1036
The XML Security Database Parser class in the XMLSecDB ActiveX control in the HIPSEngine component in the Management Server before 8.1.0.88, and the client before 1.6.450, in CA Host-Based Intrusion Prevention System (HIPS) 8.1, as used in CA Internet…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.55%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The XML Security Database Parser class in the XMLSecDB ActiveX control in the HIPSEngine component in the Management Server before 8.1.0.88, and the client before 1.6.450, in CA Host-Based Intrusion Prevention System (HIPS) 8.1, as used in CA Internet Security Suite (ISS) 2010, allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via vectors involving the SetXml and Save methods.
- CVSS 2.0
- 8.8 HIGHAV:N/AC:M/Au:N/C:N/I:C/A:C
- EPSS
- 2.55% probability · 84th percentile
- CISA KEV
- Not listed
- Affected
- ca/host-based intrusion prevention system · ca/internet security suite 2010 · ca/internet security suite 2011
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/43377
- http://secunia.com/advisories/43490
- http://securityreason.com/securityalert/8106
- http://www.securityfocus.com/archive/1/516649/100/0/threaded
- http://www.securityfocus.com/archive/1/516687/100/0/threaded
- http://www.securityfocus.com/bid/46539
- http://www.securitytracker.com/id?1025120
- http://www.vupen.com/english/advisories/2011/0496
- http://www.zerodayinitiative.com/advisories/ZDI-11-093
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65632
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7B53A608DF-BFDB-4AB3-A98F-E4BB6BC7A2F4%7D
- http://secunia.com/advisories/43377
- http://secunia.com/advisories/43490
- http://securityreason.com/securityalert/8106
- http://www.securityfocus.com/archive/1/516649/100/0/threaded
- http://www.securityfocus.com/archive/1/516687/100/0/threaded
- http://www.securityfocus.com/bid/46539
- http://www.securitytracker.com/id?1025120
- http://www.vupen.com/english/advisories/2011/0496
- http://www.zerodayinitiative.com/advisories/ZDI-11-093
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65632
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7B53A608DF-BFDB-4AB3-A98F-E4BB6BC7A2F4%7D
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.