Description
IBM DB2 Universal Database 7 before FixPak 12 creates certain DMS directories with insecure permissions (777), which allows local users to modify or delete certain DB2 files.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/14030
Patch, Vendor Advisory vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/9243
Vendor Advisory vendor-advisory
x_refsource_aixapar
http://www-1.ibm.com/support/search.wss?rs=0&q=IY44841&apar=only
Various Sources vendor-advisory
x_refsource_aixapar
http://www-1.ibm.com/support/search.wss?rs=0&q=IY44842&apar=only
Scores
EPSS
0.0033
EPSS Percentile
25.6%
Details
Status
published
Products (2)
ibm/db2_universal_database
7.0
ibm/db2_universal_database
8.0
Published
Sep 28, 2004
Tracked Since
Feb 18, 2026