IBM solidDB 'rpc_test_svc' Commands Multiple Denial of Service Vulnerabilities

Bugtraq ID:	47584
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2011-1208
Remote:	Yes
Local:	No
Published:	Apr 26 2011 12:00AM
Updated:	Apr 26 2011 12:00AM
Credit:	Tenable Network Security
Vulnerable:	IBM solidDB 6.0.10 .18 IBM solidDB 6.5.0.3 IBM solidDB 6.5 FP 3 IBM solidDB 6.5 FP 2 IBM solidDB 6.5 IBM solidDB 6.30.0.37 IBM solidDB 6.30.0.33 IBM solidDB 6.30.0.29 IBM solidDB 6.3 FP 7 IBM solidDB 6.3 FP 6 IBM solidDB 6.0.1068 IBM solidDB 4.5.181 IBM solidDB 4.5.180
Not Vulnerable:

IBM solidDB 'rpc_test_svc' Commands Multiple Denial of Service Vulnerabilities

IBM solidDB is prone to multiple denial-of-service vulnerabilities that affect the 'solidDB.exe' service.

Attackers can exploit these issues to crash the affected application, denying service to legitimate users. Due to the nature of these issues, arbitrary code execution may be possible; this has not been confirmed.

IBM solidDB 'rpc_test_svc' Commands Multiple Denial of Service Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM solidDB 'rpc_test_svc' Commands Multiple Denial of Service Vulnerabilities

Solution:
Updates are available; please see the references for more information.

IBM solidDB 'rpc_test_svc' Commands Multiple Denial of Service Vulnerabilities

References:

• solidDB Homepage (IBM)
  
• Security Alert: Vulnerability in IBM solidDB can create a denial of service cond (IBM)
  
• ZDI-11-142 IBM solidDB solid.exe rpc_test_svc Commands Multiple DoS Vulnerabilit (Zero Day Initiative)