DB2 - Problembeschreibung
Problem IT00687 | Status: Geschlossen |
SECURITY: ELEVATED PRIVILEGES WITH DB2 EXECUTABLES (CVE-2014-0907) | |
Produkt: | |
DB2 FOR LUW / DB2FORLUW / A50 - DB2 | |
Problembeschreibung: | |
There is a vulnerability in several DB2 executables which a local user can exploit to gain elevated privilege. This vulnerability does not exist on DB2 for Windows. See security bulletin for details: http://www.ibm.com/support/docview.wss?uid=swg21672100 | |
Problem-Zusammenfassung: | |
**************************************************************** * USERS AFFECTED: * * All DB2 systems on all Linux and Unix platforms at service * * levels from Version 10.5 GA through to Version 10.5 Fix Pack * * 3. * **************************************************************** * PROBLEM DESCRIPTION: * * See Error Description * **************************************************************** * RECOMMENDATION: * * Upgrade to DB2 Version 10.5 Fix Pack 3a * **************************************************************** | |
Local-Fix: | |
verfügbare FixPacks: | |
DB2 Version 10.5 Fix Pack 3a for Linux, UNIX, and Windows | |
Lösung | |
The complete fix for this problem first appears in DB2 Version 10.5 Fix Pack 3a and all the subsequent Fix Packs. | |
Workaround | |
keiner bekannt / siehe Local-Fix | |
Weitere Daten | |
Datum - Problem gemeldet : Datum - Problem geschlossen : Datum - der letzten Änderung: | 28.03.2014 30.06.2014 30.06.2014 |
Problem behoben ab folgender Versionen (IBM BugInfos) | |
Problem behoben lt. FixList in der Version |