CVE-2010-2771

Description

solid.exe in IBM solidDB before 6.5 FP2 allows remote attackers to execute arbitrary code via a long username field in the first handshake packet.

Affected Platforms

Weakness Type

CWE-94

References

• http://publib.boulder.ibm.com/infocenter/soliddb/v6r5/index.jsp?topic=/com.ibm.s…
• http://securitytracker.com/id?1024203
• http://www.securityfocus.com/bid/41653
• http://www.zerodayinitiative.com/advisories/ZDI-10-125/
• http://publib.boulder.ibm.com/infocenter/soliddb/v6r5/index.jsp?topic=/com.ibm.s…
• http://securitytracker.com/id?1024203