CVE-2011-1208

Currently unrated

Key Information:

Vendor
IBM
Status
Soliddb
Vendor
CVE Published:
5 May 2011

Summary

IBM solidDB 4.5.x before 4.5.182, 6.0.x before 6.0.1069, 6.1.x and 6.3.x before 6.3 FP8 (aka 6.3.49), and 6.5.x before 6.5 FP4 (aka 6.5.0.4) does not properly handle the (1) rpc_test_svc_readwrite and (2) rpc_test_svc_done commands, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted command.

References

http://securitytracker.com/id?1025451
vdb-entryx_refsource_SECTRACK
http://www.zerodayinitiative.com/advisories/ZDI-11-142/
x_refsource_MISC
http://secunia.com/advisories/44380
third-party-advisoryx_refsource_SECUNIA

EPSS Score

5% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.