CVE-2012-0200 The server in IBM solidDB 6.5 before Interim Fix 6 does not properly initialize data structures, which allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statem...
MediumCVSS 4.0
EPSS 5.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The server in IBM solidDB 6.5 before Interim Fix 6 does not properly initialize data structures, which allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with a redundant WHERE condition.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm soliddb | <= 6.5.0.8 | No fix listed |
| ibm soliddb | = 6.5.0.0 | No fix listed |
| ibm soliddb | = 6.5.0.1 | No fix listed |
| ibm soliddb | = 6.5.0.2 | No fix listed |
| ibm soliddb | = 6.5.0.3 | No fix listed |
| ibm soliddb | = 6.5.0.4 | No fix listed |
| ibm soliddb | = 6.5.0.5 | No fix listed |
| ibm soliddb | = 6.5.0.6 | No fix listed |
| ibm soliddb | = 6.5.0.7 | No fix listed |
References
- IC81244 vendor-advisory
- www.ibm.com
- soliddb-redundant-where-dos(73126) vdb-entry