CVE-2011-1208
published 2011-05-05CVE-2011-1208: IBM solidDB 4.5.x before 4.5.182, 6.0.x before 6.0.1069, 6.1.x and 6.3.x before 6.3 FP8 (aka 6.3.49), and 6.5.x before 6.5 FP4 (aka 6.5.0.4) does not properly…
PriorityP433high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
3.26%
86.9th percentile
IBM solidDB 4.5.x before 4.5.182, 6.0.x before 6.0.1069, 6.1.x and 6.3.x before 6.3 FP8 (aka 6.3.49), and 6.5.x before 6.5 FP4 (aka 6.5.0.4) does not properly handle the (1) rpc_test_svc_readwrite and (2) rpc_test_svc_done commands, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted command.
Affected
31 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | soliddb | — | — |
| ibm | soliddb | — | — |
| ibm | soliddb | — | — |
| ibm | soliddb | — | — |
| ibm | soliddb | — | — |
| ibm | soliddb | — | — |
| ibm | soliddb | — | — |
| ibm | soliddb | — | — |
| ibm | soliddb | — | — |
| ibm | soliddb | — | — |
| ibm | soliddb | — | — |
| ibm | soliddb | — | — |
| ibm | soliddb | — | — |
| ibm | soliddb | — | — |
| ibm | soliddb | — | — |
| ibm | soliddb | — | — |
| ibm | soliddb | — | — |
| ibm | soliddb | — | — |
| ibm | soliddb | — | — |
| ibm | soliddb | — | — |
| ibm | soliddb | — | — |
| ibm | soliddb | — | — |
| ibm | soliddb | — | — |
| ibm | soliddb | — | — |
| ibm | soliddb | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
eSignal and eSignal Pro 10.6.2425.1208 - File Parsing Buffer Overflow in QUO (Metasploit)
exploitdb·2011-09-20
CVE-2011-3494 eSignal and eSignal Pro 10.6.2425.1208 - File Parsing Buffer Overflow in QUO (Metasploit)
eSignal and eSignal Pro 10.6.2425.1208 - File Parsing Buffer Overflow in QUO (Metasploit)
---
##
# $Id: esignal_styletemplate_bof.rb 13765 2011-09-20 17:39:53Z sinn3r $
##
##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# Framework web site for more information on licensing and terms of use.
# http://metasploit.com/framework/
##
require 'msf/core'
class Metasploit3 'eSignal and eSignal Pro %q{
The software is unable to handle the "" files (even
those original included in the program) like those with the registered
extensions QUO, SUM and POR. Successful exploitation of this vulnerability
may take up to several seconds due to the use of egghunter. Also, DEP
bypass is unlikely due to the lim
Exploit-DB
eSignal and eSignal Pro 10.6.2425.1208 - Multiple Vulnerabilities
exploitdb·2011-09-14
CVE-2011-3494 eSignal and eSignal Pro 10.6.2425.1208 - Multiple Vulnerabilities
eSignal and eSignal Pro 10.6.2425.1208 - Multiple Vulnerabilities
---
#######################################################################
Luigi Auriemma
Application: eSignal and eSignal Pro
http://www.esignal.com/esignal/default.aspx
Versions: " files (even
those original included in the program) like those with the registered
extensions QUO, SUM and POR:
eax=00000001 ebx=00000000 ecx=61616161 edx=02830000 esi=0012f020 edi=03ed97f0
eip=61616161 esp=0012efb8 ebp=0012f088 iopl=0 nv up ei pl nz ac po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00010212
61616161 ?? ???
B] heap overflow
Heap overflow during the handling of the Font->FaceName field of the
various files that use it like ETS, ETQ, ESK and so on:
eax=04255aa8 ebx=0012f004 ecx=04255ab4 edx=61616160 esi=0012f0
No writeups or analysis indexed.
http://secunia.com/advisories/44380http://securitytracker.com/id?1025451http://www.ibm.com/support/docview.wss?uid=swg21496106http://www.securityfocus.com/bid/47584http://www.vupen.com/english/advisories/2011/1117http://www.zerodayinitiative.com/advisories/ZDI-11-142/https://exchange.xforce.ibmcloud.com/vulnerabilities/67019http://secunia.com/advisories/44380http://securitytracker.com/id?1025451http://www.ibm.com/support/docview.wss?uid=swg21496106http://www.securityfocus.com/bid/47584http://www.vupen.com/english/advisories/2011/1117http://www.zerodayinitiative.com/advisories/ZDI-11-142/https://exchange.xforce.ibmcloud.com/vulnerabilities/67019
2011-05-05
Published