CVE-2010-4055

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Stack consumption vulnerability in solid.exe in IBM solidDB 6.5.0.3 and earlier allows remote attackers to cause a denial of service (memory consumption and daemon crash) by connecting to TCP port 1315 and sending a packet with many integer fields, which trigger many recursive calls of a certain function.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Weakness enumeration

CWE-399

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://aluigi.altervista.org/adv/soliddb_1-adv.txtExploit
http://secunia.com/advisories/41873Vendor Advisory
http://securitytracker.com/id?1024597
http://www.exploit-db.com/exploits/15261Exploit
http://www.vupen.com/english/advisories/2010/2715Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/62590
http://aluigi.altervista.org/adv/soliddb_1-adv.txtExploit
http://secunia.com/advisories/41873Vendor Advisory
http://securitytracker.com/id?1024597
http://www.exploit-db.com/exploits/15261Exploit
http://www.vupen.com/english/advisories/2010/2715Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/62590

Timeline

Published: Oct 23, 2010
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-40565.0solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon receiving packet data con CVE-2010-40575.0solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon receiving packet data con CVE-2010-40684.9Unspecified vulnerability in the Extension Manager in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 allows remote au CVE-2010-40698.5Stack-based buffer overflow in IBM Informix Dynamic Server (IDS) 7.x through 7.31, 9.x through 9.40, 10.00 before 10.00.xC10, 11.10 before 1 CVE-2010-407010.0Integer overflow in librpc.dll in portmap.exe (aka the ISM Portmapper service) in ISM before 2.20.TC1.117 in IBM Informix Dynamic Server (ID CVE-2010-40712.6Cross-site scripting (XSS) vulnerability in AgentTicketZoom in OTRS 2.4.x before 2.4.9, when RichText is enabled, allows remote attackers to CVE-2010-40721.9The copy_shmid_to_user function in ipc/shm.c in the Linux kernel before 2.6.37-rc1 does not initialize a certain structure, which allows loc CVE-2010-40731.9The ipc subsystem in the Linux kernel before 2.6.37-rc1 does not initialize certain structures, which allows local users to obtain potential CVE-2010-40741.9The USB subsystem in the Linux kernel before 2.6.36-rc5 does not properly initialize certain structure members, which allows local users to CVE-2010-40751.9The uart_get_count function in drivers/serial/serial_core.c in the Linux kernel before 2.6.37-rc1 does not properly initialize a certain str CVE-2010-40761.9The rs_ioctl function in drivers/char/amiserial.c in the Linux kernel 2.6.36.1 and earlier does not properly initialize a certain structure CVE-2010-40771.9The ntty_ioctl_tiocgicount function in drivers/char/nozomi.c in the Linux kernel 2.6.36.1 and earlier does not properly initialize a certain