Description
The Install component in IBM DB2 9.5 before FP5 and 9.7 before FP1 configures the High Availability (HA) scripts with incorrect file-permission and authorization settings, which has unknown impact and local attack vectors.
References
- IC63959 vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21293566
- ADV-2009-3520 vdb-entry
- 37332 vdb-entry
- http://www-01.ibm.com/support/docview.wss?uid=swg21412902
- 37759 third-party-advisory
- IC63581 vendor-advisory