IBM SolidDB is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM user privileges. Failed exploit attempts will result in a denial-of- service condition. The vulnerability is reported in version 6.5 FP1 (6.5.0.1). Prior versions may also be affected.

The vendor released updates to address this issue. Please see the references for more information.

• http://www.solidtech.com/en/products/relationaldatabasemanagementsoftware/embed.asp
• http://www.zerodayinitiative.com/advisories/ZDI-10-125/
• https://www.securityfocus.com/bid/41653

---

Updated on 2017-03-28