Description
The server in IBM solidDB 6.5 before FP9 and 7.0 before FP1 allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with a ROWNUM condition involving a subquery.
References
- IC79861 vendor-advisory
- http://www.ibm.com/support/docview.wss?uid=swg27021052
- http://www-01.ibm.com/support/docview.wss?uid=swg27021052#if5
- 1026555 vdb-entry
- IC80675 vendor-advisory
- soliddb-rownum-dos(72651) vdb-entry
- 51629 vdb-entry
- 47654 third-party-advisory