CVE-2010-4055 Stack consumption vulnerability in solid.exe in IBM solidDB 6.5.0.3 and earlier allows remote attackers to cause a denial of service (memory consumption and daemon crash) by connecting to TCP port 131...
MediumCVSS 5.0
EPSS 7.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack consumption vulnerability in solid.exe in IBM solidDB 6.5.0.3 and earlier allows remote attackers to cause a denial of service (memory consumption and daemon crash) by connecting to TCP port 1315 and sending a packet with many integer fields, which trigger many recursive calls of a certain function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm soliddb | <= 6.5.0.3 | No fix listed |
| ibm soliddb | = 4.5.167 | No fix listed |
| ibm soliddb | = 4.5.168 | No fix listed |
| ibm soliddb | = 4.5.169 | No fix listed |
| ibm soliddb | = 4.5.173 | No fix listed |
| ibm soliddb | = 4.5.175 | No fix listed |
| ibm soliddb | = 4.5.176 | No fix listed |
| ibm soliddb | = 4.5.178 | No fix listed |
| ibm soliddb | = 06.00.1018 | No fix listed |
| ibm soliddb | = 6.0.1060 | No fix listed |
| ibm soliddb | = 6.0.1061 | No fix listed |
| ibm soliddb | = 6.0.1064 | No fix listed |
| ibm soliddb | = 6.0.1065 | No fix listed |
| ibm soliddb | = 6.0.1066 | No fix listed |
| ibm soliddb | = 6.1 | No fix listed |
| ibm soliddb | = 6.1.20 | No fix listed |
| ibm soliddb | = 6.3.33 | No fix listed |
| ibm soliddb | = 6.3.37 | No fix listed |
| ibm soliddb | = 6.5.0.0 | No fix listed |
| ibm soliddb | = 6.5.0.1 | No fix listed |
| ibm soliddb | = 6.5.0.2 | No fix listed |
| ibm soliddb | = 6.30.0039 | No fix listed |
| ibm soliddb | = 6.30.0040 | No fix listed |
| ibm soliddb | = 6.30.0044 | No fix listed |
| ibm soliddb | = 06.30.0047 | No fix listed |
References
- aluigi.altervista.org exploit
- 41873 third-party-advisory vendor-advisory
- 1024597 vdb-entry
- 15261 exploit
- ADV-2010-2715 vdb-entry vendor-advisory
- ibm-solid-database-server-dos(62590) vdb-entry