CVE-2011-0489

The server components in Objectivity/DB 10.0 do not require authentication for administrative commands, which allows remote attackers to modify data, obtain sensitive information, or cause a denial of service by sending requests over TCP to (1) the Lock Server or (2) the Advanced Multithreaded Server, as demonstrated by commands that are ordinarily sent by the (a) ookillls and (b) oostopams applications. NOTE: some of these details are obtained from third party information.

• CWE-287

• http://osvdb.org/70424
• http://secunia.com/advisories/42901Vendor Advisory
• http://www.exploit-db.com/exploits/15988Exploit
• http://www.kb.cert.org/vuls/id/782567US Government Resource
• http://www.securityfocus.com/bid/45803
• http://www.vupen.com/english/advisories/2011/0127Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64699
• http://osvdb.org/70424
• http://secunia.com/advisories/42901Vendor Advisory
• http://www.exploit-db.com/exploits/15988Exploit
• http://www.kb.cert.org/vuls/id/782567US Government Resource
• http://www.securityfocus.com/bid/45803
• http://www.vupen.com/english/advisories/2011/0127Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64699

Published

Jan 18, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-0483Google Chrome before 8.0.552.237 and Chrome OS before 8.0.55…
• CVE-2011-0484Google Chrome before 8.0.552.237 and Chrome OS before 8.0.55…
• CVE-2011-0485Google Chrome before 8.0.552.237 and Chrome OS before 8.0.55…
• CVE-2011-0486Cross-site scripting (XSS) vulnerability in cognos.cgi in IB…
• CVE-2011-0487ICQ 7 does not verify the authenticity of updates, which all…
• CVE-2011-0488Stack-based buffer overflow in NTWebServer.exe in the test w…
• CVE-2011-0490Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha makes …
• CVE-2011-0491The tor_realloc function in Tor before 0.2.1.29 and 0.2.2.x …
• CVE-2011-0492Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows…
• CVE-2011-0493Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha might …
• CVE-2011-0494Directory traversal vulnerability in WebSEAL in IBM Tivoli A…
• CVE-2011-0495Stack-based buffer overflow in the ast_uri_encode function i…