CVE-2006-6496 - OpenCVE

The (1) VetMONNT.sys and (2) VetFDDNT.sys drivers in CA Anti-Virus 2007 8.1, Anti-Virus for Vista Beta 8.2, and CA Internet Security Suite 2007 v3.0 do not properly handle NULL buffers, which allows local users with administrative access to cause a denial of service (system crash) via certain IOCTLs.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Local

Access Complexity Medium

Authentication Single

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

AV:L/AC:M/Au:S/C:C/I:C/A:C

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Broadcom	Etrust Antivirus Internet Security Suite

Configuration 1 [-]

OR	cpe:2.3:a:broadcom:etrust_antivirus:8.1:::::::*
	cpe:2.3:a:broadcom:etrust_antivirus:8.2:beta::::::
	cpe:2.3:a:broadcom:internet_security_suite:3.0:::::::*

No data.

References

Link	Providers
http://crm.my-etrust.com/CIDocument.asp?KDId=2651&GUID=9FD7E4F8362C4A168D88B4FFA34DCB4C
http://secunia.com/advisories/23378
http://securitytracker.com/id?1017381
http://securitytracker.com/id?1017382
http://www.osvdb.org/30845
http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=41
http://www.securityfocus.com/archive/1/454420/100/0/threaded
http://www.securityfocus.com/bid/21593
http://www.vupen.com/english/advisories/2006/5010
http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34870
https://exchange.xforce.ibmcloud.com/vulnerabilities/30909

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2006-12-13T21:00:00

Updated: 2024-08-07T20:26:46.511Z

Reserved: 2006-12-13T00:00:00

Link: CVE-2006-6496

Vulnrichment

No data.

NVD

Status : Modified

Published: 2006-12-13T21:28:00.000

Modified: 2021-04-09T17:08:01.597

Link: CVE-2006-6496

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-12-13T00:00:00", "descriptions": [{"lang": "en", "value": "The (1) VetMONNT.sys and (2) VetFDDNT.sys drivers in CA Anti-Virus 2007 8.1, Anti-Virus for Vista Beta 8.2, and CA Internet Security Suite 2007 v3.0 do not properly handle NULL buffers, which allows local users with administrative access to cause a denial of service (system crash) via certain IOCTLs."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-17T20:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34870"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://crm.my-etrust.com/CIDocument.asp?KDId=2651&GUID=9FD7E4F8362C4A168D88B4FFA34DCB4C"}, {"name": "20061214 [CAID 34870]: CA Anti-Virus vetfddnt.sys, vetmonnt.sys Local Denial of Service Vulnerabilities", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/454420/100/0/threaded"}, {"tags": ["x_refsource_MISC"], "url": "http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=41"}, {"name": "30845", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/30845"}, {"name": "21593", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/21593"}, {"name": "1017382", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1017382"}, {"name": "ca-vetmonnt-vetfddnt-dos(30909)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30909"}, {"name": "23378", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/23378"}, {"name": "ADV-2006-5010", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/5010"}, {"name": "1017381", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1017381"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-6496", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The (1) VetMONNT.sys and (2) VetFDDNT.sys drivers in CA Anti-Virus 2007 8.1, Anti-Virus for Vista Beta 8.2, and CA Internet Security Suite 2007 v3.0 do not properly handle NULL buffers, which allows local users with administrative access to cause a denial of service (system crash) via certain IOCTLs."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34870", "refsource": "CONFIRM", "url": "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34870"}, {"name": "http://crm.my-etrust.com/CIDocument.asp?KDId=2651&GUID=9FD7E4F8362C4A168D88B4FFA34DCB4C", "refsource": "CONFIRM", "url": "http://crm.my-etrust.com/CIDocument.asp?KDId=2651&GUID=9FD7E4F8362C4A168D88B4FFA34DCB4C"}, {"name": "20061214 [CAID 34870]: CA Anti-Virus vetfddnt.sys, vetmonnt.sys Local Denial of Service Vulnerabilities", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/454420/100/0/threaded"}, {"name": "http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=41", "refsource": "MISC", "url": "http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=41"}, {"name": "30845", "refsource": "OSVDB", "url": "http://www.osvdb.org/30845"}, {"name": "21593", "refsource": "BID", "url": "http://www.securityfocus.com/bid/21593"}, {"name": "1017382", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1017382"}, {"name": "ca-vetmonnt-vetfddnt-dos(30909)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30909"}, {"name": "23378", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/23378"}, {"name": "ADV-2006-5010", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/5010"}, {"name": "1017381", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1017381"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T20:26:46.511Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34870"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://crm.my-etrust.com/CIDocument.asp?KDId=2651&GUID=9FD7E4F8362C4A168D88B4FFA34DCB4C"}, {"name": "20061214 [CAID 34870]: CA Anti-Virus vetfddnt.sys, vetmonnt.sys Local Denial of Service Vulnerabilities", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/454420/100/0/threaded"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=41"}, {"name": "30845", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/30845"}, {"name": "21593", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/21593"}, {"name": "1017382", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1017382"}, {"name": "ca-vetmonnt-vetfddnt-dos(30909)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30909"}, {"name": "23378", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/23378"}, {"name": "ADV-2006-5010", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/5010"}, {"name": "1017381", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1017381"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-6496", "datePublished": "2006-12-13T21:00:00", "dateReserved": "2006-12-13T00:00:00", "dateUpdated": "2024-08-07T20:26:46.511Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:broadcom:etrust_antivirus:8.1:*:*:*:*:*:*:*", "matchCriteriaId": "52C533CA-ACB7-4C0F-98E2-B5E51E24A554", "vulnerable": true}, {"criteria": "cpe:2.3:a:broadcom:etrust_antivirus:8.2:beta:*:*:*:*:*:*", "matchCriteriaId": "8027330E-3E6D-496D-8277-0279145679FB", "vulnerable": true}, {"criteria": "cpe:2.3:a:broadcom:internet_security_suite:3.0:*:*:*:*:*:*:*", "matchCriteriaId": "285013A5-E058-4B2B-B8B6-1BFF72388589", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The (1) VetMONNT.sys and (2) VetFDDNT.sys drivers in CA Anti-Virus 2007 8.1, Anti-Virus for Vista Beta 8.2, and CA Internet Security Suite 2007 v3.0 do not properly handle NULL buffers, which allows local users with administrative access to cause a denial of service (system crash) via certain IOCTLs."}, {"lang": "es", "value": "Los controladores de dispositivo (1) VetMONNT.sys y (2) VetFDDNT.sys de CA Anti-Virus 2007 8.1, Anti-Virus para Vista Beta 8.2 y CA Internet Security Suite 2007 v3.0 no gestionan apropiadamente b\u00faferes Null, lo cual permite a usuarios locales con acceso de administrados provocar una denegaci\u00f3n de servicio (ca\u00edda del sistema) mediante IOCTLs concretos."}], "id": "CVE-2006-6496", "lastModified": "2021-04-09T17:08:01.597", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "SINGLE", "availabilityImpact": "COMPLETE", "baseScore": 6.6, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:M/Au:S/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 2.7, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-12-13T21:28:00.000", "references": [{"source": "cve@mitre.org", "url": "http://crm.my-etrust.com/CIDocument.asp?KDId=2651&GUID=9FD7E4F8362C4A168D88B4FFA34DCB4C"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/23378"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1017381"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1017382"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/30845"}, {"source": "cve@mitre.org", "url": "http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=41"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/454420/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/21593"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2006/5010"}, {"source": "cve@mitre.org", "url": "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34870"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30909"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}