Description
IBM solidDB 06.00.1018 and earlier does not validate a certain field that specifies an amount of memory to allocate, which allows remote attackers to cause a denial of service (daemon exit) via a packet with a large value in this field.
References
- http://aluigi.org/poc/soliduro.zip
- 29512 third-party-advisory
- 1019721 vdb-entry
- ibm-soliddb-memory-dos(41488) vdb-entry
- 28468 vdb-entry
- 20080326 Multiple vulnerabilities in solidDB 06.00.1018 mailing-list
- http://aluigi.altervista.org/adv/soliduro-adv.txt
- ADV-2008-1038 vdb-entry