CVE-2008-3856

The routine infrastructure component in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP1 on Unix and Linux does not change the ownership of the db2fmp process, which has unknown impact and attack vectors.

Link	Resource
http://www-1.ibm.com/support/docview.wss?uid=swg21255607	Patch
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ20352	Patch
http://www.securityfocus.com/bid/29601	Patch
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ20350
ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT
http://secunia.com/advisories/31787	Vendor Advisory
ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ19155	Patch
http://secunia.com/advisories/29784	Vendor Advisory
http://www.securityfocus.com/bid/31058
https://exchange.xforce.ibmcloud.com/vulnerabilities/45140

Configuration 1

cpe:2.3:a:ibm:db2_universal_database:8:fp4a:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp4:solaris:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp13:hp_ux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp5:solaris:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp11:hp_ux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:*:fp16:solaris:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp2:solaris:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp15:solaris:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp2:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp7b:solaris:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp14:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp4a:solaris:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp13:solaris:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp12:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp5:hp_ux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp6a:solaris:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp2:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp12:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp3:solaris:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:*:fp16:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp8:solaris:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp7b:hp_ux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp4:hp_ux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp10:hp_ux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp14:hp_ux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp9:hp_ux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp6b:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp14:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp9:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:*:fp4a:hp-ux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:hp-ux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp4a:hp_ux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:*:fp4a:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8.0:*:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp9a:solaris:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp10:solaris:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp6a:hp_ux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8.0:*:hp_ux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp11:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp8:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp6b:hp_ux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp4:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:9.1:*:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp6:solaris:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8.0:*:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp5:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:*:fp4a:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:solaris:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp9a:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:*:fp16:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp1:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp6c:hp_ux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp15:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp3:hp_ux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp8:hp_ux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp8a:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:hp-ux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp1:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp7a:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp7a:solaris:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:hp-ux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp7a:hp_ux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp9a:hp_ux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp6:hp_ux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp11:solaris:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp9a:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:*:fp16:hp_ux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp11:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp4:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp3:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp13:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp6a:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp6b:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp1:hp_ux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp15:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp7b:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp6c:solaris:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp7:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp2:hp_ux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:solaris:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp6c:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp14:solaris:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp7:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp8a:solaris:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp10:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp7:solaris:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp4a:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp6a:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp6c:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp15:hp_ux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp9:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:solaris:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp5:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8.0:*:solaris:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp7:hp_ux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:9.1:*:solaris:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp7b:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp8a:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp9:solaris:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp6:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp6:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp13:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp8a:hp_ux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp6b:solaris:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp12:solaris:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:9.1:*:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:9.1:*:hp_ux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp10:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:*:fp4a:solaris:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp7a:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp8:linux:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp3:aix:*:*:*:*:* cpe:2.3:a:ibm:db2_universal_database:8:fp12:hp_ux:*:*:*:*:*

---

Published : 2008-08-28 05:41

Updated : 2017-08-08 01:32

---

NVD link : CVE-2008-3856

Mitre link : CVE-2008-3856

No products.

CWE-264