IBM solidDB 6.5.0.3 - Denial of Service
| Reporter | Title | Published | Views | Family All 19 |
|---|---|---|---|---|
 | IBM Solid Database 6.5 < 6.5.0.8 Multiple Denial of Service Vulnerabilities | 23 Feb 201200:00 | – | nessus |
| IBM solidDB 6.5 < 6.5.0.8 Multiple Denial of Service Vulnerabilities | 23 Feb 201200:00 | – | nessus |
 | CVE-2010-4055 | 22 Oct 201022:00 | – | cve |
| CVE-2010-4056 | 22 Oct 201022:00 | – | cve |
| CVE-2010-4057 | 22 Oct 201022:00 | – | cve |
 | CVE-2010-4055 | 22 Oct 201022:00 | – | cvelist |
| CVE-2010-4056 | 22 Oct 201022:00 | – | cvelist |
| CVE-2010-4057 | 22 Oct 201022:00 | – | cvelist |
 | EUVD-2010-4032 | 7 Oct 202500:30 | – | euvd |
 | CVE-2010-4055 | 23 Oct 201020:39 | – | nvd |
10
Source: http://aluigi.org/adv/soliddb_1-adv.txt
#######################################################################
Luigi Auriemma
Application: IBM solidDB
http://www-01.ibm.com/software/data/soliddb/
Versions: <= 6.5.0.3
Platforms: AIX, Linux, Solaris, Windows
Bug: Denial of Service
Exploitation: remote, versus server
Date: 15 Oct 2010
Author: Luigi Auriemma
e-mail: [email protected]
web: aluigi.org
#######################################################################
1) Introduction
2) Bug
3) The Code
4) Fix
#######################################################################
===============
1) Introduction
===============
"IBM solidDB product family features relational, in-memory database
technology that delivers extreme speed, performing up to ten times
faster than conventional, disk-based databases."
#######################################################################
======
2) Bug
======
The solid.exe service listening on port 1315 can be crashed by an
external attacker through a malformed type of packet.
The bugged function is located at address 0063dc60 which is called
recursively if the packet contains a particular value between the range
of values 15001 and 15100 (switch 9).
The effects of the problem can be:
- stack exaustion by using over 14000 of these values so that all the
memory of the stack gets consumed by these recursive callings
- NULL pointer due to the usage of only one of these values where an
unused pointer (set to zero) is used in a comparison operation
- invalid memory access by using also another type of value after those
#######################################################################
===========
3) The Code
===========
http://aluigi.org/poc/soliddb_1.zip
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/15261.zip
#######################################################################
======
4) Fix
======
No fix.
#######################################################################Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
16 Oct 2010 00:00Current
5.2Medium risk
Vulners AI Score5.2
CVSS 25
EPSS0.0843