Lucene search

PRIOn knowledge basePRION:CVE-2008-3856

HistoryAug 28, 2008 - 5:41 p.m.

Security feature bypass

2008-08-2817:41:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

82.0%

JSON

The routine infrastructure component in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP1 on Unix and Linux does not change the ownership of the db2fmp process, which has unknown impact and attack vectors.

CPENameOperatorVersion
db2_universal_databaseeq8 fp4a-aix
db2_universal_databaseeq8 fp4-solaris
db2_universal_databaseeq8 fp13hpux
db2_universal_databaseeq8 fp5-solaris
db2_universal_databaseeq8 fp11hpux
db2_universal_databasele8
db2_universal_databaseeq8 fp2-solaris
db2_universal_databaseeq8 fp15-solaris
db2_universal_databaseeq8 fp2-linux
db2_universal_databaseeq8 fp7b-solaris

Name	Operator	Version
db2_universal_database	eq	8 fp4a-aix
db2_universal_database	eq	8 fp4-solaris
db2_universal_database	eq	8 fp13hpux
db2_universal_database	eq	8 fp5-solaris
db2_universal_database	eq	8 fp11hpux
db2_universal_database	le	8
db2_universal_database	eq	8 fp2-solaris
db2_universal_database	eq	8 fp15-solaris
db2_universal_database	eq	8 fp2-linux
db2_universal_database	eq	8 fp7b-solaris

Rows per page:

1-10 of 1191

References

ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT

ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT

secunia.com/advisories/29784

secunia.com/advisories/31787

www-01.ibm.com/support/docview.wss?uid=swg1IZ19155

www-1.ibm.com/support/docview.wss?uid=swg1IZ20350

www-1.ibm.com/support/docview.wss?uid=swg1IZ20352

www-1.ibm.com/support/docview.wss?uid=swg21255607

www.securityfocus.com/bid/29601

www.securityfocus.com/bid/31058

exchange.xforce.ibmcloud.com/vulnerabilities/45140