Description
The XML Security Database Parser class in the XMLSecDB ActiveX control in the HIPSEngine component in the Management Server before 8.1.0.88, and the client before 1.6.450, in CA Host-Based Intrusion Prevention System (HIPS) 8.1, as used in CA Internet Security Suite (ISS) 2010, allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via vectors involving the SetXml and Save methods.
References
- ADV-2011-0496 vdb-entry
- 43490 third-party-advisory
- http://www.zerodayinitiative.com/advisories/ZDI-11-093
- 43377 third-party-advisory
- 46539 vdb-entry
- 20110223 ZDI-11-093: CA Internet Security Suite HIPS XML Security Database Parser Class Remote Code Execution Vulnerability mailing-list
- 8106 third-party-advisory
- 20110225 CA20110223-01: Security Notice for CA Host-Based Intrusion Prevention System mailing-list
- 1025120 vdb-entry
- ca-products-activex-file-overwrite(65632) vdb-entry
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7B53A608DF-BFDB-4AB3-A98F-E4BB6BC7A2F4%7D