Authentication Bypass in Objectivity/DB 10.0 Affects Remote Management Capabilities

CVE-2011-0489

What is CVE-2011-0489?

The server components in Objectivity/DB 10.0 are exposed due to a lack of authentication for administrative commands. This security oversight enables remote attackers to execute potentially harmful commands against the Lock Server or the Advanced Multithreaded Server. By sending specific TCP requests, attackers can modify critical data, access sensitive information, or disrupt service availability, thereby posing significant risks to data integrity and system reliability.

References