CVE-2009-0682

{"id": "CVE-2009-0682", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2009-08-19T17:30:00.890", "references": [{"url": "http://en.securitylab.ru/lab/PT-2009-05", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/57228", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/505880/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/506103/100/0/threaded", "source": "cve@mitre.org"}, {"url": "https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=214673", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://en.securitylab.ru/lab/PT-2009-05", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://osvdb.org/57228", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/505880/100/0/threaded", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/506103/100/0/threaded", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=214673", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "vetmonnt.sys in CA Internet Security Suite r3, vetmonnt.sys before 9.0.0.184 in Internet Security Suite r4, and vetmonnt.sys before 10.0.0.217 in Internet Security Suite r5 do not properly verify IOCTL calls, which allows local users to cause a denial of service (system crash) via a crafted call."}, {"lang": "es", "value": "vetmonnt.sys en CA Internet Security Suite r3, vetmonnt.sys anteriores a v9.0.0.184 en Internet Security Suite r4, y vetmonnt.sys anteriores a v10.0.0.217 en Internet Security Suite r5 no verifica adecuadamente las llamadas IOCTL, lo que permite a usuarios locales producir una denegaci\u00f3n de servicio ( ca\u00edda de sistema) a trav\u00e9s de una llamada manipulada."}], "lastModified": "2024-11-21T01:00:41.050", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ca:internet_security_suite:*:r3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C9C3A838-C3FC-4134-89E3-3AE13078A359"}, {"criteria": "cpe:2.3:a:ca:internet_security_suite:9.0.0.184:r4:32bit:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "80B3EC69-F6F6-45E1-80BB-038C1D9C5FA6"}, {"criteria": "cpe:2.3:a:ca:internet_security_suite:10.0.0.217:r5:32bit:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E391D3E0-FEBF-4634-BB89-7AFCC04415E9"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}