CVE-2008-3856
28.08.2008, 17:41
The routine infrastructure component in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP1 on Unix and Linux does not change the ownership of the db2fmp process, which has unknown impact and attack vectors.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ibm | db2_universal_database | 𝑥 ≤ 8 |
| ibm | db2_universal_database | 𝑥 ≤ 8 |
| ibm | db2_universal_database | 𝑥 ≤ 8 |
| ibm | db2_universal_database | 𝑥 ≤ 8 |
| ibm | db2_universal_database | 𝑥 ≤ 9.1 |
| ibm | db2_universal_database | 𝑥 ≤ 9.1 |
| ibm | db2_universal_database | 𝑥 ≤ 9.1 |
| ibm | db2_universal_database | 𝑥 ≤ 9.1 |
| ibm | db2_universal_database | 8.0 |
| ibm | db2_universal_database | 8.0 |
| ibm | db2_universal_database | 8.0 |
| ibm | db2_universal_database | 8.0 |
| ibm | db2_universal_database | 9.1 |
| ibm | db2_universal_database | 9.1 |
| ibm | db2_universal_database | 9.1 |
| ibm | db2_universal_database | 9.1 |
| ibm | db2_universal_database | 9.1:fp2 |
| ibm | db2_universal_database | 9.1:fp2 |
| ibm | db2_universal_database | 9.1:fp2 |
| ibm | db2_universal_database | 9.1:fp2 |
| ibm | db2_universal_database | 9.1:fp3 |
| ibm | db2_universal_database | 9.1:fp3 |
| ibm | db2_universal_database | 9.1:fp3 |
| ibm | db2_universal_database | 9.1:fp3 |
| ibm | db2_universal_database | 9.1:fp4 |
| ibm | db2_universal_database | 9.1:fp4 |
| ibm | db2_universal_database | 9.1:fp4 |
| ibm | db2_universal_database | 9.1:fp4 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References