CVE-2008-3856

published 2008-08-28

CVE-2008-3856: The routine infrastructure component in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP1 on Unix and Linux does not change the ownership of the db2fmp…

high 7.5 CVSS 3.1

AV N AC L Au N C P I P A P

The routine infrastructure component in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP1 on Unix and Linux does not change the ownership of the db2fmp process, which has unknown impact and attack vectors.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
ibm	db2	—	—
ibm	db2	—	—
ibm	db2	—	—
ibm	db2_universal_database	<= 8	—
ibm	db2_universal_database	<= 9.1	—
ibm	db2_universal_database	—	—
ibm	db2_universal_database	—	—
ibm	db2_universal_database	—	—

CWE-264