PT-2010-5270 · Ibm · Soliddb

Luigi Auriemma · Publicado 2010-10-22 · Atualizado 2017-08-17 · CVE-2010-4056

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions IBM solidDB version 6.5.0.3 and earlier

Description The issue arises from improper handling of packet data in solid.exe, allowing remote attackers to cause a denial of service through a NULL pointer dereference and daemon crash. This can be achieved via a TCP session on port 1315 by sending packet data containing a single integer field, which triggers a recursive call to a certain function.

Recommendations For IBM solidDB version 6.5.0.3 and earlier, consider restricting access to port 1315 to minimize the risk of exploitation until a fix is available. As a temporary workaround, limiting the handling of packet data containing single integer fields may help mitigate the issue.

Exploit

Correção

Identificadores relacionados

CVE-2010-4056

Produtos afetados

Soliddb

Referências · 8

• 🔥 https://exploit-db.com/exploits/15261 · Exploit
• 🔥 http://exploit-db.com/exploits/15261 · Exploit
• 🔥 http://aluigi.altervista.org/adv/soliddb_1-adv.txt · Exploit
• http://secunia.com/advisories/41873 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-4056 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/62590 · Nota
• http://vupen.com/english/advisories/2010/2715 · Aviso do Fabricante
• http://securitytracker.com/id?1024597 · Nota