PT-2010-5270 · Ibm · Soliddb

Luigi Auriemma · Published 2010-10-22 · Updated 2017-08-17 · CVE-2010-4056

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions IBM solidDB version 6.5.0.3 and earlier

Description The issue arises from improper handling of packet data in solid.exe, allowing remote attackers to cause a denial of service through a NULL pointer dereference and daemon crash. This can be achieved via a TCP session on port 1315 by sending packet data containing a single integer field, which triggers a recursive call to a certain function.

Recommendations For IBM solidDB version 6.5.0.3 and earlier, consider restricting access to port 1315 to minimize the risk of exploitation until a fix is available. As a temporary workaround, limiting the handling of packet data containing single integer fields may help mitigate the issue.

Exploit

Fix

Related Identifiers

CVE-2010-4056

Affected Products

Soliddb

References · 8

• 🔥 https://exploit-db.com/exploits/15261 · Exploit
• 🔥 http://exploit-db.com/exploits/15261 · Exploit
• 🔥 http://aluigi.altervista.org/adv/soliddb_1-adv.txt · Exploit
• http://secunia.com/advisories/41873 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-4056 · Security Note
• http://vupen.com/english/advisories/2010/2715 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/62590 · Note
• http://securitytracker.com/id?1024597 · Note