What’s Vulnerable › Vulnerabilities

CVE-2010-2771

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2010-07-22 · updated 2026-06-16
• Weakness: CWE-94

Description

solid.exe in IBM solidDB before 6.5 FP2 allows remote attackers to execute arbitrary code via a long username field in the first handshake packet.

Affected products

• IBM Soliddb: through 6.5.0.1; 4.5.167, 4.5.168, 4.5.169, 4.5.173, 4.5.175, 4.5.176 (+15)

References

• http://publib.boulder.ibm.com/infocenter/soliddb/v6r5/index.jsp?topic=/com.ibm.swg.im.soliddb.common.doc/doc/detailed.list.fixes.html
• http://securitytracker.com/id?1024203
• http://www.securityfocus.com/bid/41653
• http://www.zerodayinitiative.com/advisories/ZDI-10-125/
• http://publib.boulder.ibm.com/infocenter/soliddb/v6r5/index.jsp?topic=/com.ibm.swg.im.soliddb.common.doc/doc/detailed.list.fixes.html
• http://securitytracker.com/id?1024203
• http://www.securityfocus.com/bid/41653
• http://www.zerodayinitiative.com/advisories/ZDI-10-125/

Get alerted when CVE-2010-2771 or the next vulnerability affects your stack