CVE-2010-2771

solid.exe in IBM solidDB before 6.5 FP2 allows remote attackers to execute arbitrary code via a long username field in the first handshake packet...

Code injection

solid.exe in IBM solidDB before 6.5 FP2 allows remote attackers to execute arbitrary code via a long username field in the first handshake packet...

CVE-2010-2771

IBM SolidDB 'solid.exe' handshake vulnerability (CVE-2010-2771) affects SolidDB versions prior to 6.5 FP2 and allows remote code execution via a long username field in the first handshake packet. Multiple sources confirm a remote code execution impact, with OpenVAS citing SYSTEM-level privileges ...

CVE-2010-2771

solid.exe in IBM solidDB before 6.5 FP2 allows remote attackers to execute arbitrary code via a long username field in the first handshake packet...

UNICOM/IBM solidDB Detection (TCP)

TCP based detection of UNICOM/IBM solidDB. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100721...

IBM SolidDB 'solid.exe' Handshake Remote Code Execution Vulnerability

IBM SolidDB is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM user privileges. Failed exploit attempts will result in a denial-of- service condition. The vulnerability is reported in version 6.5 FP1 6.5.0.1. Prior versions...

IBM SolidDB 'solid.exe' Handshake RCE Vulnerability

IBM SolidDB is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:soliddb"; ...

ZDI-10-125: IBM SolidDB solid.exe Handshake Request Username Field Remote Code Execution Vulnerability

ZDI-10-125: IBM SolidDB solid.exe Handshake Request Username Field Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-125 July 13, 2010 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: IBM -- Affected Products: IBM solidDB -- TippingPointTM IPS...

IBM SolidDB solid.exe Handshake Request Username Field Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM solidDB. Authentication is not required to exploit this vulnerability. The specific flaw exists within the solid.exe process which listens by default on TCP port 1315. The code responsible for...

IBM solidDB < 6.30.0.37 Invalid Error Code DoS

The version of IBM solidDB database server installed on the remote host is older than 6.30.0.37 6.3 Fix Pack 3 / 6.3.37, and hence is affected by a denial of service vulnerability. By sending a specially crafted packet with a negative error code other than -1, it may be possible for an attacker t...

Core Security Technologies Advisory 2009.1027

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ IBM SolidDB invalid error code vulnerability 1. Advisory Information Title: IBM SolidDB invalid error code vulnerability Advisory Id: CORE-2009-1027 Advisory URL:...

IBM SolidDB solid.exe远程拒绝服务漏洞

BUGTRAQ ID: 37053 CVE ID: CVE-2009-3840 IBM solidDB是可实现电信级性能的关系数据库。 IBM SolidDB包含有一个内嵌式的数据库服务组件（solid.exe），该服务默认启用，在2315/tcp端口上接受远程连接。在从网络接收到报文时，服务会基于报文中所指定的出错代码编号确定并显示出错代码字符串。如果攻击者发送了带有无效出错代码编号的特制报文，就可以触发异常，强制终止服务。以下是有漏洞部分的代码段： /----- 0061611F 0FB65424 02 MOVZX EDX,BYTE PTR SS:ESP+2 00616124...

IBM SolidDB / HP OpenView NNM DoS

DoS against TCP/2315 TCP/2690 for HP OV NNM database engine...

CORE-2009-1027: IBM SolidDB invalid error code vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ IBM SolidDB invalid error code vulnerability 1. Advisory Information Title: IBM SolidDB invalid error code vulnerability Advisory Id: CORE-2009-1027 Advisory URL:...

IBM SolidDB - Invalid Error Code

IBM SolidDB - Invalid Error Code 1. Advisory Information Title: IBM SolidDB invalid error code vulnerability Advisory Id: CORE-2009-1027 Advisory URL: http://www.coresecurity.com/content/ibm-soliddb-errorcode-dos Date published: 2009-11-18 Date of last update: 2009-11-18 Vendors contacted: IBM...

IBM SolidDB invalid error code vulnerability

Advisory ID Internal CORE-2009-1027 1. Advisory Information Title: IBM SolidDB invalid error code vulnerability Advisory Id: CORE-2009-1027 Date published: 2009-11-18 Date of last update: 2009-11-18 Vendors contacted: IBM Release mode: Forced release 2. Vulnerability Information Class: External...

IBM SolidDB - Invalid Error Code

Advisory Information Title: IBM SolidDB invalid error code vulnerability Advisory Id: CORE-2009-1027 Advisory URL: http://www.coresecurity.com/content/ibm-soliddb-errorcode-dos Date published: 2009-11-18 Date of last update: 2009-11-18 Vendors contacted: IBM Release mode: Forced release 2...

IBM SolidDB invalid error code vulnerability

No description provided by source. 1. Advisory Information Title: IBM SolidDB invalid error code vulnerability Advisory Id: CORE-2009-1027 Advisory URL: http://www.coresecurity.com/content/ibm-soliddb-errorcode-dos Date published: 2009-11-18 Date of last update: 2009-11-18 Vendors contacted: IBM...

IBM SolidDB invalid error code vulnerability

Exploit for unknown platform in category dos / poc ============================================ IBM SolidDB invalid error code vulnerability ============================================ Title: IBM SolidDB invalid error code vulnerability CVE-ID: OSVDB-ID: Author: Core Security Published: 2009-11-...

IBM solidDB Logging Function Format String (CVE-2008-1705)

IBM solidDB is a relational database management system offered by Solid, an IBM Company. solidDB includes an in-memory database as well as a traditional database, which employ both the same SQL interface, and a high availability option. There exists a Format String vulnerability in the IBM solidD...