Lucene search

PRIOn knowledge basePRION:CVE-2009-4334

HistoryDec 16, 2009 - 6:30 p.m.

Design/Logic Flaw

2009-12-1618:30:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

The Self Tuning Memory Manager (STMM) component in IBM DB2 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 uses 0666 permissions for the STMM log file, which allows local users to cause a denial of service or have unspecified other impact by writing to this file.

CPENameOperatorVersion
db2eq9.1 fp4
db2eq9.5
db2eq9.1 fp6a
db2eq9.1 fp1
db2eq9.1
db2eq9.1 fp5
db2eq9.5 fp1
db2eq9.1 fp3
db2eq9.1 fp3a
db2eq9.5 fp2a

Name	Operator	Version
db2	eq	9.1 fp4
db2	eq	9.5
db2	eq	9.1 fp6a
db2	eq	9.1 fp1
db2	eq	9.1
db2	eq	9.1 fp5
db2	eq	9.5 fp1
db2	eq	9.1 fp3
db2	eq	9.1 fp3a
db2	eq	9.5 fp2a

Rows per page:

1-10 of 191

References

ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT

ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT

ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v97/APARLIST.TXT

secunia.com/advisories/37759

www-01.ibm.com/support/docview.wss?uid=swg1IC64019

www-01.ibm.com/support/docview.wss?uid=swg1IZ48106

www-01.ibm.com/support/docview.wss?uid=swg1IZ50355

www-01.ibm.com/support/docview.wss?uid=swg21293566

www-01.ibm.com/support/docview.wss?uid=swg21412902

www.securityfocus.com/bid/37332

www.vupen.com/english/advisories/2009/3520