DB2 - Problembeschreibung
Problem IT08753 | Status: Geschlossen |
SECURITY: LOCAL ESCALATION OF PRIVILEGE VULNERABILITY IN DB2 (CVE-2015-1947) | |
Produkt: | |
DB2 FOR LUW / DB2FORLUW / A50 - DB2 | |
Problembeschreibung: | |
IBM DB2 contain a security vulnerability which allows a malicious user to gain root privilege. This vulnerability can only be exploited by users through a local system account login. | |
Problem-Zusammenfassung: | |
**************************************************************** * USERS AFFECTED: * * All DB2 systems on all Linux, Unix and Windows platforms at * * service levels Version 10.5 GA through to Version 10.5 Fix * * Pack 6 * **************************************************************** * PROBLEM DESCRIPTION: * * See Error Description * **************************************************************** * RECOMMENDATION: * * Upgrade to DB2 Version 10.5 Fix Pack 7. * * Refer to security bulletin for remediation: * * http://www-01.ibm.com/support/docview.wss?uid=swg21970376 * **************************************************************** | |
Local-Fix: | |
Please refer to security bulletin for remediation: http://www-01.ibm.com/support/docview.wss?uid=swg21970376 | |
Lösung | |
The complete fix for this problem first appears in DB2 Version 10.5 Fix Pack 7 and all the subsequent Fix Packs. | |
Workaround | |
keiner bekannt / siehe Local-Fix | |
Weitere Daten | |
Datum - Problem gemeldet : Datum - Problem geschlossen : Datum - der letzten Änderung: | 06.05.2015 15.01.2016 15.01.2016 |
Problem behoben ab folgender Versionen (IBM BugInfos) | |
Problem behoben lt. FixList in der Version | |
10.5.0.7 |