137 matches found
CVE-2010-4055
Stack consumption vulnerability in solid.exe in IBM solidDB 6.5.0.3 and earlier allows remote attackers to cause a denial of service memory consumption and daemon crash by connecting to TCP port 1315 and sending a packet with many integer fields, which trigger many recursive calls of a certain...
CVE-2010-4056
IBM solidDB 6.5.0.3 and earlier are affected by CVE-2010-4056. The issue occurs when processing a TCP packet on port 1315 containing a single integer field, causing a NULL pointer dereference and daemon crash (remote denial of service). Multiple vulnerability feeds (NVD, OpenVAS, Nessus, etc.) co...
CVE-2010-4056: Undefined Security Weakness
solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon receiving packet data containing a single integer field, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a TCP session on por...
CVE-2010-4057: Undefined Security Weakness
solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon receiving packet data containing many integer fields with two different values, which allows remote attackers to cause a denial of service invalid memory access and daemon crash via ...
CVE-2010-4055: Undefined Security Weakness
Stack consumption vulnerability in solid.exe in IBM solidDB 6.5.0.3 and earlier allows remote attackers to cause a denial of service memory consumption and daemon crash by connecting to TCP port 1315 and sending a packet with many integer fields, which trigger many recursive calls of a certain...
IBM solidDB Multiple Denial of Service Vulnerabilities
IBM solidDB is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
IBM solidDB Multiple Denial of Service Vulnerabilities
IBM solidDB is prone to multiple denial-of-service vulnerabilities. Attackers can exploit these issues to crash the affected application, denying service to legitimate users. solidDB 6.5.0.3 is vulnerable; other versions may also be affected. OpenVAS Vulnerability Test $Id: gbibmsoliddb44158.nasl...
IBM solidDB 6.5.0.3 - Denial of Service
IBM solidDB 6.5.0.3 - Denial of Service Source: http://aluigi.org/adv/soliddb1-adv.txt Luigi Auriemma Application: IBM solidDB http://www-01.ibm.com/software/data/soliddb/ Versions: = 6.5.0.3 Platforms: AIX, Linux, Solaris, Windows Bug: Denial of Service Exploitation: remote, versus server Date: ...
IBM solidDB 6.5.0.3 - Denial of Service
Source: http://aluigi.org/adv/soliddb1-adv.txt Luigi Auriemma Application: IBM solidDB http://www-01.ibm.com/software/data/soliddb/ Versions: = 6.5.0.3 Platforms: AIX, Linux, Solaris, Windows Bug: Denial of Service Exploitation: remote, versus server Date: 15 Oct 2010 Author: Luigi Auriemma e-mai...
CVE-2010-2771
solid.exe in IBM solidDB before 6.5 FP2 allows remote attackers to execute arbitrary code via a long username field in the first handshake packet...
Code injection
solid.exe in IBM solidDB before 6.5 FP2 allows remote attackers to execute arbitrary code via a long username field in the first handshake packet...
CVE-2010-2771
IBM SolidDB 'solid.exe' handshake vulnerability (CVE-2010-2771) affects SolidDB versions prior to 6.5 FP2 and allows remote code execution via a long username field in the first handshake packet. Multiple sources confirm a remote code execution impact, with OpenVAS citing SYSTEM-level privileges ...
CVE-2010-2771
solid.exe in IBM solidDB before 6.5 FP2 allows remote attackers to execute arbitrary code via a long username field in the first handshake packet...
CVE-2010-2771: Improper Control of Generation of Code
solid.exe in IBM solidDB before 6.5 FP2 allows remote attackers to execute arbitrary code via a long username field in the first handshake packet...
IBM SolidDB 'solid.exe' Handshake RCE Vulnerability
IBM SolidDB is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:soliddb"; ...
IBM SolidDB 'solid.exe' Handshake Remote Code Execution Vulnerability
IBM SolidDB is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM user privileges. Failed exploit attempts will result in a denial-of- service condition. The vulnerability is reported in version 6.5 FP1 6.5.0.1. Prior versions...
UNICOM/IBM solidDB Detection (TCP)
TCP based detection of UNICOM/IBM solidDB. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100721...
ZDI-10-125: IBM SolidDB solid.exe Handshake Request Username Field Remote Code Execution Vulnerability
ZDI-10-125: IBM SolidDB solid.exe Handshake Request Username Field Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-125 July 13, 2010 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: IBM -- Affected Products: IBM solidDB -- TippingPointTM IPS...
IBM SolidDB solid.exe Handshake Request Username Field Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM solidDB. Authentication is not required to exploit this vulnerability. The specific flaw exists within the solid.exe process which listens by default on TCP port 1315. The code responsible for...
IBM solidDB < 6.30.0.37 Invalid Error Code DoS
The version of IBM solidDB database server installed on the remote host is older than 6.30.0.37 6.3 Fix Pack 3 / 6.3.37, and hence is affected by a denial of service vulnerability. By sending a specially crafted packet with a negative error code other than -1, it may be possible for an attacker t...