IBM SolidDB 'solid.exe' Denial of Service Vulnerability

Bugtraq ID:	37053
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 18 2009 12:00AM
Updated:	Jan 26 2010 04:41PM
Credit:	Damian Frizza from Core Security Technologies.
Vulnerable:	IBM solidDB 6.30.0.33 IBM solidDB 6.30.0.29
Not Vulnerable:	IBM solidDB 6.30.0.37

IBM SolidDB 'solid.exe' Denial of Service Vulnerability

IBM SolidDB is prone to a remote denial-of-service vulnerability.

An attacker may leverage this issue to crash the affected application, denying service to affected users.

This issue affects SolidDB 6.30.0.29 and 6.30.0.33; other versions may also be affected.

IBM SolidDB 'solid.exe' Denial of Service Vulnerability

Attackers can exploit this issue by sending a specially crafted packet to a vulnerable computer.

The following example is available:

• /data/vulnerabilities/exploits/37053.py

IBM SolidDB 'solid.exe' Denial of Service Vulnerability

Solution:
The vendor has released fixes. Please see the references for details.

IBM SolidDB 'solid.exe' Denial of Service Vulnerability

References:

• solidDB and solidDB Universal Cache 6.3 Fix Pack 3 (IBM)
  
• IBM SolidDB invalid error code vulnerability (Core Security Technologies)
  
• CORE-2009-1027: IBM SolidDB invalid error code vulnerability (CORE-2009-1027: IBM SolidDB invalid error code vulnerability)