IBM SolidDB / HP OpenView NNM DoS

DoS against TCP/2315 TCP/2690 for HP OV NNM database engine...

CORE-2009-1027: IBM SolidDB invalid error code vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ IBM SolidDB invalid error code vulnerability 1. Advisory Information Title: IBM SolidDB invalid error code vulnerability Advisory Id: CORE-2009-1027 Advisory URL:...

IBM SolidDB - Invalid Error Code

IBM SolidDB - Invalid Error Code 1. Advisory Information Title: IBM SolidDB invalid error code vulnerability Advisory Id: CORE-2009-1027 Advisory URL: http://www.coresecurity.com/content/ibm-soliddb-errorcode-dos Date published: 2009-11-18 Date of last update: 2009-11-18 Vendors contacted: IBM...

IBM SolidDB invalid error code vulnerability

Exploit for unknown platform in category dos / poc ============================================ IBM SolidDB invalid error code vulnerability ============================================ Title: IBM SolidDB invalid error code vulnerability CVE-ID: OSVDB-ID: Author: Core Security Published: 2009-11-...

IBM solidDB Logging Function Format String (CVE-2008-1705)

IBM solidDB is a relational database management system offered by Solid, an IBM Company. solidDB includes an in-memory database as well as a traditional database, which employ both the same SQL interface, and a high availability option. There exists a Format String vulnerability in the IBM solidD...

CVE-2008-1707

IBM solidDB 06.00.1018 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a packet with an 0x11 value in a certain "type" field...

CVE-2008-1705

Format string vulnerability in the logging function in IBM solidDB 06.00.1018 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the 1 user name, 2 peer name, and possibly unspecified other fields...

Design/Logic Flaw

Uncontrolled array index in IBM solidDB 06.00.1018 and earlier allows remote attackers to cause a denial of service daemon crash via a large value in a certain 32-bit field...

Format string

Format string vulnerability in the logging function in IBM solidDB 06.00.1018 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the 1 user name, 2 peer name, and possibly unspecified other fields...

CVE-2008-1706

Uncontrolled array index in IBM solidDB 06.00.1018 and earlier allows remote attackers to cause a denial of service daemon crash via a large value in a certain 32-bit field...

IBM solidDB格式串及拒绝服务漏洞

BUGTRAQ ID: 28468 IBM solidDB是可实现电信级性能的关系数据库。 solidDB的日志函数中存在格式串处理漏洞，如果用户使用了畸形的用户或对等端名称的话，就可能向日志中写入恶意脚本或命令并在管理员查看日志时执行。 solidDB服务器使用了客户端所提供的32位数字作为读取数组中某些值的索引，如果设置了很多数字的话，就可能访问无效内存，导致服务器崩溃。 如果用户向服务器发送了特制报文的话，就可能触发空指针引用，或通过分配一定数量的内存导致Out of central memory错误消息，服务器会终止。 IBM solidDB = 06.00.1018 IBM -...

Multiple vulnerabilities in solidDB 06.00.1018

Luigi Auriemma Application: IBM solidDB http://www.solidtech.com/en/products/relationaldatabasemanagementsoftware/embed.asp Versions: = 06.00.1018 Platforms: Windows tested, Solaris, AIX, HP-UX and Linux Bugs: A format string in logging function B crash caused by arbitrary array index C NULL...

IBM solidDB 6.0.10 - Format String Denial of Service

IBM solidDB 6.0.10 - Format String Denial of Service source: https://www.securityfocus.com/bid/28468/info IBM solidDB is prone to a format-string vulnerability affecting the logging function and three denial-of-service vulnerabilities. Attackers can exploit these issues to execute arbitrary code ...

IBM solidDB 6.0.10 - Format String / Denial of Service

source: https://www.securityfocus.com/bid/28468/info IBM solidDB is prone to a format-string vulnerability affecting the logging function and three denial-of-service vulnerabilities. Attackers can exploit these issues to execute arbitrary code or to deny service to legitimate users. solidDB...