CVE-2011-4890 The server in IBM solidDB 6.5 before FP9 and 7.0 before FP1 allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with a ROWNUM condition involving a sub...
MediumCVSS 4.0
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The server in IBM solidDB 6.5 before FP9 and 7.0 before FP1 allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with a ROWNUM condition involving a subquery.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm soliddb | <= 6.5.0.8 | No fix listed |
| ibm soliddb | = 6.5.0.0 | No fix listed |
| ibm soliddb | = 6.5.0.1 | No fix listed |
| ibm soliddb | = 6.5.0.2 | No fix listed |
| ibm soliddb | = 6.5.0.3 | No fix listed |
| ibm soliddb | = 6.5.0.4 | No fix listed |
| ibm soliddb | = 6.5.0.5 | No fix listed |
| ibm soliddb | = 6.5.0.6 | No fix listed |
| ibm soliddb | = 6.5.0.7 | No fix listed |
| ibm soliddb | = 7.0.0.0 | No fix listed |
References
- 47654 third-party-advisory
- IC79861 vendor-advisory
- IC80675 vendor-advisory
- www-01.ibm.com
- www.ibm.com
- 51629 vdb-entry
- 1026555 vdb-entry
- soliddb-rownum-dos(72651) vdb-entry