CVE-2008-1708

Currently unrated

Key Information:

Vendor
IBM
Status
Soliddb
Vendor
CVE Published:
9 April 2008

Summary

IBM solidDB 06.00.1018 and earlier does not validate a certain field that specifies an amount of memory to allocate, which allows remote attackers to cause a denial of service (daemon exit) via a packet with a large value in this field.

References

http://aluigi.org/poc/soliduro.zip
x_refsource_MISC
http://secunia.com/advisories/29512
third-party-advisoryx_refsource_SECUNIA
http://securitytracker.com/id?1019721
vdb-entryx_refsource_SECTRACK

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.