IBM solidDB 6.5.0.8 - 'SELECT' Statement 'WHERE' Condition Denial of Service

source: https://www.securityfocus.com/bid/52111/info IBM solidDB is prone to a denial-of-service vulnerability. Attackers can exploit this issue to crash the affected application, denying service to legitimate users. IBM solidDB versions prior to 6.5.0.8 Interim Fix 6 are vulnerable. SELECT FROM ...

IBM solidDB 6.5.0.8 - SELECT Statement WHERE Condition Denial of Service

IBM solidDB 6.5.0.8 - SELECT Statement WHERE Condition Denial of Service source: https://www.securityfocus.com/bid/52111/info IBM solidDB is prone to a denial-of-service vulnerability. Attackers can exploit this issue to crash the affected application, denying service to legitimate users. IBM...

IBM solidDB < 7.0 Fix Pack 1 / 6.5.0.8 Interim Fix 5 Denial of Service

According to its version number, the solidDB install on the remote host is affected by a denial of service vulnerability due to a flaw in the way the application handles 'SELECT' statements containing a 'rownum' condition with a subquery. A remote, unauthenticated attacker can leverage this issue...

IBM solidDB User Authentication Bypass Vulnerability

IBM solidDB is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:soliddb";...

IBM solidDB RPC Test Commands Denial of Service Vulnerabilities

IBM solidDB is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:soliddb";...

IBM solidDB RPC Test Commands Denial of Service Vulnerabilities

This host is running IBM solidDB and is prone to multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmsoliddbrpctestsvcdosvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ IBM solidDB RPC Test Commands Denial of Service Vulnerabilities Authors: Antu Sanadi Copyright:...

IBM solidDB User Authentication Bypass Vulnerability

This host is running IBM solidDB and is prone to authentication bypass vulnerability. OpenVAS Vulnerability Test $Id: gbsoliddbauthbypassvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ IBM solidDB User Authentication Bypass Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2011 Greenbone...

IBM solidDB solid.exe Authentication Bypass (CVE-2011-1560)

IBM solidDB is a relational database management system that includes an in-memory database as well as a traditional database, both of which employ the same SQL interface. An authentication bypass vulnerability has been reported in IBM's solidDB. The authentication protocol used by the product...

CVE-2011-1208

IBM solidDB 4.5.x before 4.5.182, 6.0.x before 6.0.1069, 6.1.x and 6.3.x before 6.3 FP8 aka 6.3.49, and 6.5.x before 6.5 FP4 aka 6.5.0.4 does not properly handle the 1 rpctestsvcreadwrite and 2 rpctestsvcdone commands, which allows remote attackers to cause a denial of service NULL pointer...

Null pointer dereference

IBM solidDB 4.5.x before 4.5.182, 6.0.x before 6.0.1069, 6.1.x and 6.3.x before 6.3 FP8 aka 6.3.49, and 6.5.x before 6.5 FP4 aka 6.5.0.4 does not properly handle the 1 rpctestsvcreadwrite and 2 rpctestsvcdone commands, which allows remote attackers to cause a denial of service NULL pointer...

CVE-2011-1208

The CVE-2011-1208 entry concerns IBM SolidDB. Affected versions include solidDB 4.5.x prior to 4.5.182, 6.0.x prior to 6.0.1069, 6.1.x, 6.3.x prior to 6.3 FP8 (6.3.49), and 6.5.x prior to 6.5 FP4 (6.5.0.4). The issue is a denial-of-service condition caused by improper handling of the rpc_test_svc...

CVE-2011-1208

IBM solidDB 4.5.x before 4.5.182, 6.0.x before 6.0.1069, 6.1.x and 6.3.x before 6.3 FP8 aka 6.3.49, and 6.5.x before 6.5 FP4 aka 6.5.0.4 does not properly handle the 1 rpctestsvcreadwrite and 2 rpctestsvcdone commands, which allows remote attackers to cause a denial of service NULL pointer...

IBM solidDB < 4.5.182 / 6.0.1069 / 6.3.49 / 6.5.0.4 Denial of Service

According to its version number, the solidDB install on the remote host is affected by two denial of service vulnerabilities due to a flaw in the way the application handles the 'rpctestsvcreadwrite' and and 'rpctestsvcdone'procesure commands. A remote unauthenticated attacker can leverage these...

IBM solidDB Detection (local check)

The remote Windows host is running IBM solidDB, an in-memory database application. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid53811; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/12"; scriptnameenglish:"IBM solidDB...

IBM solidDB solid.exe rpc_test_svc Commands Multiple DoS Vulnerabilities

This vulnerability allows remote attackers to create a denial of service condition on vulnerable installations of IBM SolidDB. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the rpctestsvcreadwrite and rpctestsvcdone commands. By...

IBM solidDB Packets Processing Denial of Service Vulnerabilities

This host is running IBM solidDB and is prone to multiple Denial of Service vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmsoliddbdosvuln.nasl 7029 2017-08-31 11:51:40Z teissa $ IBM solidDB Packets Processing Denial of Service Vulnerabilities Authors: Antu Sanadi Copyright: Copyright c 201...

IBM solidDB Packets Processing Denial of Service Vulnerabilities

IBM solidDB is prone to multiple Denial of Service vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:soliddb";...

IBM solidDB Password Hash Length Authentication Bypass

According to its build date, the version of IBM solidDB installed on the remote host is affected by an authentication bypass vulnerability because the application allows a remote attacker to specify the length of a password hash. A remote attacker, exploiting this flaw, could bypass authenticatio...

CVE-2011-1560

solid.exe in IBM solidDB before 4.5.181, 6.0.x before 6.0.1067, 6.1.x and 6.3.x before 6.3.47, and 6.5.x before 6.5.0.3 uses a password-hash length specified by the client, which allows remote attackers to bypass authentication via a short length value...

Authentication flaw

solid.exe in IBM solidDB before 4.5.181, 6.0.x before 6.0.1067, 6.1.x and 6.3.x before 6.3.47, and 6.5.x before 6.5.0.3 uses a password-hash length specified by the client, which allows remote attackers to bypass authentication via a short length value...