Description
The routine infrastructure component in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP1 on Unix and Linux does not change the ownership of the db2fmp process, which has unknown impact and attack vectors.
References
- 31058 vdb-entry
- http://www-1.ibm.com/support/docview.wss?uid=swg21255607
- IZ20352 vendor-advisory
- ibm-db2-infrastructure-unspecified(45140) vdb-entry
- IZ19155 vendor-advisory
- 29601 vdb-entry
- IZ20350 vendor-advisory
- 31787 third-party-advisory
- 29784 third-party-advisory