CVE:CVE-2008-2926
CNNVD:CNNVD-200808-164
CA Host-Based Intrusion Prevention System (HIPS)是CA公司的主机入侵防护系统软件。
CA HIPS r8版本中的kmxfw.sys驱动存在漏洞。
由于没有准确检验IOCTL情况，当其在CA Internet安全套装和个人防火墙中使用时，本地用户可通过构造特定的请求，导致系统崩溃产生拒绝服务，也可能获取系统特权。
solution:Upgrade broadcom internet_security_suite to a higher version than 3.0,and avoid the version 3.0; Upgrade ca host_based_intrusion_prevention_system to a higher version than r8,and avoid the version r8; Upgrade ca internet_security_suite_2008 to a higher version than *; Upgrade ca personal_firewall_2007 to a higher version than *; Upgrade ca personal_firewall_2008 to a higher version than *