CVE-2010-2771

solid.exe in IBM solidDB before 6.5 FP2 allows remote attackers to execute arbitrary code via a long username field in the first handshake packet.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2010-07-22

Last modified

2024-09-16

Weaknesses

CWE-94

Affected products

• Soliddb (Ibm)

References

• http://publib.boulder.ibm.com/infocenter/soliddb/v6r5/index.jsp?topic=/com.ibm.swg.im.soliddb.common.doc/doc/detailed.l…
• http://securitytracker.com/id?1024203
• http://www.securityfocus.com/bid/41653
• http://www.zerodayinitiative.com/advisories/ZDI-10-125/