CVE-2010-2771

CWE-94 — Code Injection3 documents3 sources
Severity
10.0CRITICAL
EPSS
14.4%
top 5.58%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Soliddb
Timeline
PublishedJul 22
Latest updateMay 17

Description

solid.exe in IBM solidDB before 6.5 FP2 allows remote attackers to execute arbitrary code via a long username field in the first handshake packet.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages1 packages

▶NVDibm/soliddb6.5.0.1+21

🔴Vulnerability Details

2
GHSA
GHSA-9qp8-xgh5-rq98: solid↗2022-05-17
▶
CVEList
CVE-2010-2771: solid↗2010-07-22
▶
CVE-2010-2771 (CRITICAL CVSS 10) | solid.exe in IBM solidDB before 6.5 | cvebase.io