critical10.0
CVE-2010-2771
solid.exe in IBM solidDB before 6.5 FP2 allows remote attackers to execute arbitrary code via a long username field in the first handshake packet.
Impact
solid.exe in IBM solidDB before 6.5 FP2 allows remote attackers to execute arbitrary code via a long username field in the first handshake packet.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Soliddb | through 6.5.0.1 Versions 4.5.167, 4.5.168, 4.5.169, 4.5.173, 4.5.175 |
Weakness classification
References
- NVD record
- CVE.org record
- http://publib.boulder.ibm.com/infocenter/soliddb/v6r5/index.jsp?topic=/com.ibm.swg.im.soliddb.common.doc/doc/detailed.list.fixes.html
- http://securitytracker.com/id?1024203
- http://www.securityfocus.com/bid/41653
- http://www.zerodayinitiative.com/advisories/ZDI-10-125/
- http://publib.boulder.ibm.com/infocenter/soliddb/v6r5/index.jsp?topic=/com.ibm.swg.im.soliddb.common.doc/doc/detailed.list.fixes.html
- http://securitytracker.com/id?1024203
- http://www.securityfocus.com/bid/41653
- http://www.zerodayinitiative.com/advisories/ZDI-10-125/