CVEvulnerability

CVE-2010-2771

10.0 HIGH Published 2010-07-22 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-07-22
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-94

Description

solid.exe in IBM solidDB before 6.5 FP2 allows remote attackers to execute arbitrary code via a long username field in the first handshake packet.

Affected configurations

• ibm soliddb (<= 6.5.0.1) • ibm soliddb 4.5.167 • ibm soliddb 4.5.168 • ibm soliddb 4.5.169 • ibm soliddb 4.5.173 • ibm soliddb 4.5.175 • ibm soliddb 4.5.176 • ibm soliddb 4.5.178 • ibm soliddb 06.00.1018 • ibm soliddb 6.0.1060 • ibm soliddb 6.0.1061 • ibm soliddb 6.0.1064 • ibm soliddb 6.0.1065 • ibm soliddb 6.0.1066 • ibm soliddb 6.1 • ibm soliddb 6.1.20 • ibm soliddb 6.3.33 • ibm soliddb 6.3.37 • ibm soliddb 6.5.0.0 • ibm soliddb 6.30.0039 • ibm soliddb 6.30.0040 • ibm soliddb 6.30.0044

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References