44380

1025451

http://www.ibm.com/support/docview.wss?uid=swg21496106

47584

ADV-2011-1117

http://www.zerodayinitiative.com/advisories/ZDI-11-142/

soliddb-null-pointer-dos(67019)

According to its version number, the solidDB install on the remote host is affected by two denial of service vulnerabilities due to a flaw in the way the application handles the 'rpc_test_svc_readwrite' and and 'rpc_test_svc_done'procesure commands.  

A remote unauthenticated attacker can leverage these issues to cause the application to de-reference a NULL pointer and subsequently crash.

The remote host is running IBM solidDB. 

Versions of solidDB earlier than 4.5.182, 6.0.x earlier than 6.0.1069, 6.3.x earlier than 6.3 Fix Pack 8, and 6.5.x earlier than 6.5.0.4 are potentially affected by a denial of service vulnerability due to a flaw in the way the application handles the rpc_test_svc_readwrite and rpc_test_svc_done commands.  A remote unauthenticated attacker, exploiting this flaw, could crash the affected host.

ID	Name	Product	Family	Severity
53812	IBM solidDB < 4.5.182 / 6.0.1069 / 6.3.49 / 6.5.0.4 Denial of Service	Nessus	Windows	medium
5906	IBM Solid Database < 4.5.182 / 6.0.1069 / 6.3.49 / 6.5.0.4 Denial of Service Vulnerability	Nessus Network Monitor	Database	high

CVE-2011-1208

high

Tenable Plugins

medium

high