← Back

CVE-2010-2771

nvd nist
Published: Jul 22, 2010Modified: Apr 29, 2026

JSON object

Loading...
10.0
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 10.0 / Impact: 10.0
Source: NVD

Description

solid.exe in IBM solidDB before 6.5 FP2 allows remote attackers to execute arbitrary code via a long username field in the first handshake packet.

Affected (22)

Products: Ibm: Soliddb
Ibm
1 product
Soliddb
Configuration A
22 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Soliddb
Up to 6.5.0.1
Soliddb
Version 06.00.1018
Soliddb
Version 4.5.167
Soliddb
Version 4.5.168
Soliddb
Version 4.5.169
Soliddb
Version 4.5.173
Soliddb
Version 4.5.175
Soliddb
Version 4.5.176
Soliddb
Version 4.5.178
Soliddb
Version 6.0.1060
Soliddb
Version 6.0.1061
Soliddb
Version 6.0.1064
Soliddb
Version 6.0.1065
Soliddb
Version 6.0.1066
Soliddb
Version 6.1.20
Soliddb
Version 6.1
Soliddb
Version 6.3.33
Soliddb
Version 6.3.37
Soliddb
Version 6.30.0039
Soliddb
Version 6.30.0040
Soliddb
Version 6.30.0044
Soliddb
Version 6.5.0.0

Related CWEs

CWE-94
Improper Control of Generation of Code ('Code Injection')
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (8)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.