CVE-2009-0682

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-08-19 · updated 2026-06-16
Weakness: CWE-20

Description

vetmonnt.sys in CA Internet Security Suite r3, vetmonnt.sys before 9.0.0.184 in Internet Security Suite r4, and vetmonnt.sys before 10.0.0.217 in Internet Security Suite r5 do not properly verify IOCTL calls, which allows local users to cause a denial of service (system crash) via a crafted call.

Affected products

Ca Internet Security Suite: 9.0.0.184-r4, 10.0.0.217-r5

References

http://en.securitylab.ru/lab/PT-2009-05
http://osvdb.org/57228
http://www.securityfocus.com/archive/1/505880/100/0/threaded
http://www.securityfocus.com/archive/1/506103/100/0/threaded
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=214673
http://en.securitylab.ru/lab/PT-2009-05
http://osvdb.org/57228
http://www.securityfocus.com/archive/1/505880/100/0/threaded
http://www.securityfocus.com/archive/1/506103/100/0/threaded
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=214673

Get alerted when CVE-2009-0682 or the next vulnerability affects your stack