IBM SolidDB 'solid.exe' Handshake Remote Code Execution Vulnerability
BID:41653
Info
IBM SolidDB 'solid.exe' Handshake Remote Code Execution Vulnerability
| Bugtraq ID: | 41653 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2010-2771 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 13 2010 12:00AM |
| Updated: | Apr 13 2015 09:02PM |
| Credit: | AbdulAziz Hariri and Zein Fneish Insight Technologies |
| Vulnerable: |
IBM solidDB 6.5 |
| Not Vulnerable: | |
Discussion
IBM SolidDB 'solid.exe' Handshake Remote Code Execution Vulnerability
IBM SolidDB is prone to a remote code-execution vulnerability.
An attacker can exploit this issue to execute arbitrary code with SYSTEM user privileges. Failed exploit attempts will result in a denial-of-service condition.
The issue affects IBM SolidDB 6.5.
IBM SolidDB is prone to a remote code-execution vulnerability.
An attacker can exploit this issue to execute arbitrary code with SYSTEM user privileges. Failed exploit attempts will result in a denial-of-service condition.
The issue affects IBM SolidDB 6.5.
Exploit / POC
IBM SolidDB 'solid.exe' Handshake Remote Code Execution Vulnerability
A commercial proof of concept is available through VUPEN Security - Exploit and PoCs Service. This proof of concept is not otherwise publicly available or known to be circulating in the wild.
A commercial proof of concept is available through VUPEN Security - Exploit and PoCs Service. This proof of concept is not otherwise publicly available or known to be circulating in the wild.
Solution / Fix
IBM SolidDB 'solid.exe' Handshake Remote Code Execution Vulnerability
Solution:
The vendor released updates to address this issue. Please see the references for more information.
Solution:
The vendor released updates to address this issue. Please see the references for more information.
References
IBM SolidDB 'solid.exe' Handshake Remote Code Execution Vulnerability
References:
References: