Exploitation Summary
EIP tracks 2 public exploits for CVE-2006-6952. PoCs published by Ruben Santamarta.
AI-analyzed exploit summary This exploit leverages a local privilege escalation vulnerability in CA Personal Firewall 2007 by injecting a malicious callback function via DeviceIoControl to execute arbitrary code with SYSTEM privileges. It triggers the payload by sending an ICMP echo request.
Description
Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4.31 and (2) Firewall kmxfw.sys 6.5.4.10 allow local users to gain privileges by using certain privileged IOCTLs to modify callback function pointers.
Exploits (2)
This exploit leverages a local privilege escalation vulnerability in CA Personal Firewall 2007 by injecting a malicious callback function via DeviceIoControl to execute arbitrary code with SYSTEM privileges. It triggers the payload by sending an ICMP echo request.
This exploit targets a local privilege escalation vulnerability in CA Personal Firewall 2007 by injecting a malicious callback into the Kmxfw.sys driver via DeviceIoControl. It then triggers the callback by sending an ICMP echo request, executing arbitrary code in Ring0 (kernel mode).