DB2 - Problembeschreibung
Problem IT15485 | Status: Geschlossen |
SECURITY: TABLE PRIVILEGE CHECKING MAY RETURN OUTDATED RESULTS AFTER A TABLE IS RENAMED (CVE-2017-1150) | |
Produkt: | |
DB2 FOR LUW / DB2FORLUW / A10 - DB2 | |
Problembeschreibung: | |
When a table is renamed and a new table is created with the old name, users who had access on the old table may be able to access the new table. | |
Problem-Zusammenfassung: | |
**************************************************************** * USERS AFFECTED: * * All DB2 systems on all Linux, Unix and Windows platforms at * * service levels Version 10.1 GA through to Version 10.1 Fix * * Pack 5. * **************************************************************** * PROBLEM DESCRIPTION: * * See Error Description * **************************************************************** * RECOMMENDATION: * * Upgrade to DB2 Version 10.1 Fix Pack 6 or see "Local Fix" * * portion for other suggestions. * **************************************************************** | |
Local-Fix: | |
See security bulletin for details: http://www-01.ibm.com/support/docview.wss?uid=swg21999515 | |
verfügbare FixPacks: | |
DB2 Version 11.1 Mod1 Fix Pack1 iFix001 for Linux, UNIX, and Windows | |
Lösung | |
The complete fix for this problem first appears in DB2 Version 10.1 Fix Pack 6 and all the subsequent Fix Packs. | |
Workaround | |
keiner bekannt / siehe Local-Fix | |
Weitere Daten | |
Datum - Problem gemeldet : Datum - Problem geschlossen : Datum - der letzten Änderung: | 26.05.2016 27.04.2017 27.04.2017 |
Problem behoben ab folgender Versionen (IBM BugInfos) | |
Problem behoben lt. FixList in der Version |