Fixes are available
APAR status
Closed as program error.
Error description
The db2stst prorgram contains an escalation of privilege vulnerability which allows the invoker to obtain DB2 instance owner privilege. The db2stst program is only shipped on Linux and Unix platforms. Users on the Windows platform are not affected.
Local fix
The db2stst program is used by DB2 Administrator Server (DAS). If you are not using DAS then you can delete this file or have the execute file permission removed.
Problem summary
**************************************************************** * USERS AFFECTED: * * All DB2 systems on all Linux, Unix and Windows platforms * * atservice levels from Version 9.1 GA through to Version * * 9.1Fix Pack 8. * **************************************************************** * PROBLEM DESCRIPTION: * * See Error Description. * **************************************************************** * RECOMMENDATION: * * Upgrade to DB2 Version 9.1 Fix Pack 9 or see "Local * * Fix"portion for other suggestions. * ****************************************************************
Problem conclusion
The complete fix for this problem first appears in DB2 Version 9.1 Fix Pack 9 and all the subsequent Fix Packs.
Temporary fix
Comments
APAR Information
APAR number
IC65408
Reported component name
DB2 FOR LUW
Reported component ID
DB2FORLUW
Reported release
910
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2010-01-05
Closed date
2010-08-30
Last modified date
2010-08-30
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
DB2 FOR LUW
Fixed component ID
DB2FORLUW
Applicable component levels
R910 PSN
UP
Rate this page:
Average rating
Copyright and trademark information
IBM, the IBM logo and ibm.com are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.