CVE-2010-4057 solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon receiving packet data containing many integer fields with two different values, which...
MediumCVSS 5.0
EPSS 7.2%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon receiving packet data containing many integer fields with two different values, which allows remote attackers to cause a denial of service (invalid memory access and daemon crash) via a TCP session on port 1315.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm soliddb | <= 6.5.0.3 | No fix listed |
| ibm soliddb | = 4.5.167 | No fix listed |
| ibm soliddb | = 4.5.168 | No fix listed |
| ibm soliddb | = 4.5.169 | No fix listed |
| ibm soliddb | = 4.5.173 | No fix listed |
| ibm soliddb | = 4.5.175 | No fix listed |
| ibm soliddb | = 4.5.176 | No fix listed |
| ibm soliddb | = 4.5.178 | No fix listed |
| ibm soliddb | = 6.0.1060 | No fix listed |
| ibm soliddb | = 6.0.1061 | No fix listed |
| ibm soliddb | = 6.0.1064 | No fix listed |
| ibm soliddb | = 6.0.1065 | No fix listed |
| ibm soliddb | = 6.0.1066 | No fix listed |
| ibm soliddb | = 6.1 | No fix listed |
| ibm soliddb | = 6.1.20 | No fix listed |
| ibm soliddb | = 6.3.33 | No fix listed |
| ibm soliddb | = 6.3.37 | No fix listed |
| ibm soliddb | = 6.5.0.0 | No fix listed |
| ibm soliddb | = 6.5.0.1 | No fix listed |
| ibm soliddb | = 6.5.0.2 | No fix listed |
| ibm soliddb | = 6.30.0039 | No fix listed |
| ibm soliddb | = 6.30.0040 | No fix listed |
| ibm soliddb | = 6.30.0044 | No fix listed |
| ibm soliddb | = 06.30.0047 | No fix listed |
References
- aluigi.altervista.org exploit
- 41873 third-party-advisory vendor-advisory
- 1024597 vdb-entry
- 15261 exploit
- ADV-2010-2715 vdb-entry vendor-advisory
- ibm-solid-database-server-dos(62590) vdb-entry