PT-2004-1225 · Ibm · Ibm Db2 Universal Database

Published 2004-08-20 · Updated 2017-07-11 · CVE-2003-1049

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM DB2 Universal Database versions prior to FixPak 12

Description The issue allows local users to modify or delete certain DB2 files due to insecure permissions (777) on certain DMS directories created by IBM DB2 Universal Database.

Recommendations For IBM DB2 Universal Database versions prior to FixPak 12, apply FixPak 12 to resolve the issue.

Fix

Related Identifiers

CVE-2003-1049

Affected Products

Ibm Db2 Universal Database

References · 5

• http://www-1.ibm.com/support/search.wss?rs=0&q=IY44842&apar=only · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-1049 · Security Note
• http://securityfocus.com/bid/9243 · Vendor Advisory
• http://www-1.ibm.com/support/search.wss?rs=0&q=IY44841&apar=only · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14030 · Note