CA Internet Security Suite XMLSecDB ActiveX Insecure File Creation (CVE-2011-1036)

CA Internet Security Suite is a comprehensive home and office security system that protects against viruses, hackers, spam, and other online threats. An insecure file creation vulnerability exists in CA Internet Security Suite. The vulnerability is due to a design weakness in the XMLSecDB.DIParse...

CA Host-Based Intrusion Prevention System 'XMLSecDB' ActiveX Control Code Execution Vulnerability

CA Host-Based Intrusion Prevention SystemHIPS is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CA Host-Based Intrusion Prevention System 'XMLSecDB' ActiveX Control Code Execution Vulnerability

This host is installed with CA Host-Based Intrusion Prevention SystemHIPS and is prone to a remote code-execution vulnerability. OpenVAS Vulnerability Test $Id: gbcahipsactivexctrlcodeexecvuln.nasl 6517 2017-07-04 13:34:20Z cfischer $ CA Host-Based Intrusion Prevention System 'XMLSecDB' ActiveX...

CA20110223-01: Security Notice for CA Host-Based Intrusion Prevention System

CA20110223-01: Security Notice for CA Host-Based Intrusion Prevention System Issued: February 23, 2011 Updated: February 24, 2011 CA Technologies support is alerting customers to a security risk associated with CA Host-Based Intrusion Prevention System HIPS. A vulnerability exists that can allow ...

CVE-2011-1036

CVE-2011-1036 affects CA HIPS and CA ISS where the XMLSecDB ActiveX control (XMLSecDB in HIPSEngine) can be exploited via SetXml/Save to write an arbitrary file on a target host, enabling remote code execution. Affected: HIPS Management Server <8.1.0.88 and clients

CA Internet Security Suite HIPS XML Security Database Parser Class Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of CA Internet Security Suite 2010. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the...