SQL Injection Vulnerability in IBM solidDB Products

CVE-2013-3031

Summary

A vulnerability exists in IBM solidDB's Universal Cache component, allowing remote authenticated users to exploit a flaw in a SQL stored procedure. By making calls with named arguments and default parameter values, while omitting some expected arguments, attackers can trigger uninitialized memory access leading to potential denial of service and crashes of the daemon. This affects specific versions of the product which require immediate attention from administrators and users to mitigate any risks associated with this vulnerability.

References