medium5.0Public exploit code
CVE-2010-4056
solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon receiving packet data containing a single in…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IBM solidDB 6.5.0.3 - Denial of Service2010-10-15 · dos · multiple
Impact
solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon receiving packet data containing a single integer field, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a TCP session on port 1315.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Soliddb | through 6.5.0.3 Versions 4.5.167, 4.5.168, 4.5.169, 4.5.173, 4.5.175 |
References
- NVD record
- CVE.org record
- http://aluigi.altervista.org/adv/soliddb_1-adv.txt
- http://secunia.com/advisories/41873
- http://securitytracker.com/id?1024597
- http://www.exploit-db.com/exploits/15261
- http://www.vupen.com/english/advisories/2010/2715
- https://exchange.xforce.ibmcloud.com/vulnerabilities/62590
- http://aluigi.altervista.org/adv/soliddb_1-adv.txt
- http://secunia.com/advisories/41873
- http://securitytracker.com/id?1024597
- http://www.exploit-db.com/exploits/15261
- http://www.vupen.com/english/advisories/2010/2715
- https://exchange.xforce.ibmcloud.com/vulnerabilities/62590