Test ID:	1.3.6.1.4.1.25623.1.0.801938
Category:	Denial of Service
Title:	IBM solidDB User Authentication Bypass Vulnerability
Summary:	IBM solidDB is prone to an authentication bypass vulnerability.
Description:	Summary: IBM solidDB is prone to an authentication bypass vulnerability. Vulnerability Insight: The flaw exists within the 'solid.exe' process which listens by default on TCP ports 1315, 1964 and 2315. The authentication protocol allows a remote attacker to specify the length of a password hash. An attacker could bypass the authentication by specifying short length value. Vulnerability Impact: Successful exploitation could allow remote attackers to bypass authentication. Affected Software/OS: IBM solidDB version before 4.5.181, 6.0.x before 6.0.1067, 6.1.x and 6.3.x before 6.3.47, and 6.5.x before 6.5.0.3 Solution: Apply the patches from the referenced advisory. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1560 http://www.zerodayinitiative.com/advisories/ZDI-11-115/ http://osvdb.org/71494 http://secunia.com/advisories/44030 http://www.vupen.com/english/advisories/2011/0854 XForce ISS Database: soliddb-auth-bypass(66455) https://exchange.xforce.ibmcloud.com/vulnerabilities/66455
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.