medium5.0Public exploit code
CVE-2010-4057
solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon receiving packet data containing many intege…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IBM solidDB 6.5.0.3 - Denial of Service2010-10-15 · dos · multiple
Impact
solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon receiving packet data containing many integer fields with two different values, which allows remote attackers to cause a denial of service (invalid memory access and daemon crash) via a TCP session on port 1315.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Soliddb | through 6.5.0.3 Versions 4.5.167, 4.5.168, 4.5.169, 4.5.173, 4.5.175 |
Weakness classification
References
- NVD record
- CVE.org record
- http://aluigi.altervista.org/adv/soliddb_1-adv.txt
- http://secunia.com/advisories/41873
- http://securitytracker.com/id?1024597
- http://www.exploit-db.com/exploits/15261
- http://www.vupen.com/english/advisories/2010/2715
- https://exchange.xforce.ibmcloud.com/vulnerabilities/62590
- http://aluigi.altervista.org/adv/soliddb_1-adv.txt
- http://secunia.com/advisories/41873
- http://securitytracker.com/id?1024597
- http://www.exploit-db.com/exploits/15261
- http://www.vupen.com/english/advisories/2010/2715
- https://exchange.xforce.ibmcloud.com/vulnerabilities/62590