Description
IBM DB2 Universal Database 7 before FixPak 12 creates certain DMS directories with insecure permissions (777), which allows local users to modify or delete certain DB2 files.
References
- db2-dms-insecure-permissions(14030) vdb-entry
- 9243 vdb-entry
- IY44841 vendor-advisory
- IY44842 vendor-advisory