CA Internet Security / CA Host-Based Intrusion Prevention System code execution

SetXml and Save methods of HIPSEngine component allows to save file to any location...

CVE-2011-1036: Undefined Security Weakness

The XML Security Database Parser class in the XMLSecDB ActiveX control in the HIPSEngine component in the Management Server before 8.1.0.88, and the client before 1.6.450, in CA Host-Based Intrusion Prevention System HIPS 8.1, as used in CA Internet Security Suite ISS 2010, allows remote attacker...