CVE-2011-1208

IBM solidDB DoS via rpc_test_svc_readwrite and rpc_test_svc_done Commands

Title source: llm
STIX 2.1

Description

IBM solidDB 4.5.x before 4.5.182, 6.0.x before 6.0.1069, 6.1.x and 6.3.x before 6.3 FP8 (aka 6.3.49), and 6.5.x before 6.5 FP4 (aka 6.5.0.4) does not properly handle the (1) rpc_test_svc_readwrite and (2) rpc_test_svc_done commands, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted command.

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1025451
Third Party Advisory x_refsource_misc
http://www.zerodayinitiative.com/advisories/ZDI-11-142/
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/44380
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/1117
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/47584
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/67019
Various Sources x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg21496106

Scores

EPSS 0.0326
EPSS Percentile 87.1%

Details

Status published
Products (31)
ibm/soliddb 4.5.167
ibm/soliddb 4.5.168
ibm/soliddb 4.5.169
ibm/soliddb 4.5.173
ibm/soliddb 4.5.175
ibm/soliddb 4.5.176
ibm/soliddb 4.5.178
ibm/soliddb 4.5.179
ibm/soliddb 4.5.180
ibm/soliddb 4.5.181
... and 21 more
Published May 05, 2011
Tracked Since Feb 18, 2026