CVE-2010-2771 solid.exe in IBM solidDB before 6.5 FP2 allows remote attackers to execute arbitrary code via a long username field in the first handshake packet.
HighCVSS 10.0
EPSS 5.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
solid.exe in IBM solidDB before 6.5 FP2 allows remote attackers to execute arbitrary code via a long username field in the first handshake packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm soliddb | <= 6.5.0.1 | No fix listed |
| ibm soliddb | = 4.5.167 | No fix listed |
| ibm soliddb | = 4.5.168 | No fix listed |
| ibm soliddb | = 4.5.169 | No fix listed |
| ibm soliddb | = 4.5.173 | No fix listed |
| ibm soliddb | = 4.5.175 | No fix listed |
| ibm soliddb | = 4.5.176 | No fix listed |
| ibm soliddb | = 4.5.178 | No fix listed |
| ibm soliddb | = 06.00.1018 | No fix listed |
| ibm soliddb | = 6.0.1060 | No fix listed |
| ibm soliddb | = 6.0.1061 | No fix listed |
| ibm soliddb | = 6.0.1064 | No fix listed |
| ibm soliddb | = 6.0.1065 | No fix listed |
| ibm soliddb | = 6.0.1066 | No fix listed |
| ibm soliddb | = 6.1 | No fix listed |
| ibm soliddb | = 6.1.20 | No fix listed |
| ibm soliddb | = 6.3.33 | No fix listed |
| ibm soliddb | = 6.3.37 | No fix listed |
| ibm soliddb | = 6.5.0.0 | No fix listed |
| ibm soliddb | = 6.30.0039 | No fix listed |
| ibm soliddb | = 6.30.0040 | No fix listed |
| ibm soliddb | = 6.30.0044 | No fix listed |
References
- publib.boulder.ibm.com
- 1024203 vdb-entry
- 41653 vdb-entry
- www.zerodayinitiative.com