CVE ID:	CVE-2008-2926
Description:	The kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, does not properly verify IOCTL requests, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted request.
Test IDs:	1.3.6.1.4.1.25623.1.0.900202
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-2926 BugTraq ID: 30651 http://www.securityfocus.com/bid/30651 Bugtraq: 20080812 CA Host-Based Intrusion Prevention System SDK kmxfw.sys Multiple Vulnerabilities (Google Search) http://www.securityfocus.com/archive/1/495397/100/0/threaded http://www.securitytracker.com/id?1020658 http://www.securitytracker.com/id?1020659 http://www.securitytracker.com/id?1020660 http://secunia.com/advisories/31434 http://www.vupen.com/english/advisories/2008/2339 XForce ISS Database: ca-kmxfw-privilege-escalation(44392) https://exchange.xforce.ibmcloud.com/vulnerabilities/44392