CVEvulnerability
CVE-2009-0682
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2009-08-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-20
Description
vetmonnt.sys in CA Internet Security Suite r3, vetmonnt.sys before 9.0.0.184 in Internet Security Suite r4, and vetmonnt.sys before 10.0.0.217 in Internet Security Suite r5 do not properly verify IOCTL calls, which allows local users to cause a denial of service (system crash) via a crafted call.
Affected configurations
• ca internet security suite
• ca internet security suite 9.0.0.184
• ca internet security suite 10.0.0.217
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://en.securitylab.ru/lab/PT-2009-05 en.securitylab.ru
- http://osvdb.org/57228 osvdb.org
- http://www.securityfocus.com/archive/1/505880/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/506103/100/0/threaded www.securityfocus.com
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=214673 Vendor Advisory
- http://en.securitylab.ru/lab/PT-2009-05 en.securitylab.ru
- http://osvdb.org/57228 osvdb.org
- http://www.securityfocus.com/archive/1/505880/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/506103/100/0/threaded www.securityfocus.com
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=214673 Vendor Advisory