The routine infrastructure component in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP1 on Unix and Linux does not change the ownership of the db2fmp process, which has unknown impact and attack vectors.

According to its version, the installation of DB2 on the remote host is affected by multiple issues :

  - By sending a malicious DB2 UDB v7 client CONNECT/DETACH requests it may be possible to crash the remote DB2 server (IZ08134).

  - An unspecified vulnerability related to 'DB2FMP' exists in DB2 (IZ20350).

  - By sending malicious packets to 'DB2JDS', it may be possible to crash the remote DB2 server (JR29274).

  - While running on Windows 'DB2FMP' runs with OS privileges (JR30228).

  - DAS server code is affected by a buffer overflow vulnerability (IZ22004).

  - Using INSTALL_JAR it may be possible to create and overwrite critical files on the system (IZ22142).

According to its version, the installation of IBM DB2 8 running on the remote host is affected by multiple issues :

  - By sending malicious DB2 UDB v7 client CONNECT/DETACH     requests it may be possible to crash the remote DB2     server. (IZ08134)

  - Failure to switch the owner of the 'DB2FMP' process     may lead to a security vulnerability on Unix / Linux     platforms. (IZ20350)

  - DAS server code is affected by a buffer overflow     vulnerability. (IZ22004)

  - Using INSTALL_JAR, it may be possible to create and     overwrite critical files on the system. (IZ22142)

  - DB2 does not mark inoperative or drop views and triggers     if the definer cannot maintain the objects. (IZ22287)

  - By sending malicious packets to 'DB2JDS', it may be     possible to crash the remote DB2 server. (JR29274)

  - While running on Windows 'DB2FMP' runs with OS     privileges. (JR30228)

According to its version, the IBM DB2 server running on the remote host is affected by one or more of the following issues :

  - There is an unspecified security vulnerability     related to a 'DB2FMP' process. (IZ20352)

  - On Windows, the 'DB2FMP' process is running with OS     privileges. (JR30026)

  - The CLR stored procedure deployment feature of IBM     Database Add-Ins for Visual Studio can be used to     escalate privileges or launch a denial of service     attack against a DB2 server. (JR28432)

  - The password used to connect to the database can be     seen in plaintext in a memory dump. (JR27422)

  - There is a possible stack variable overrun in     'SQLRLAKA()'. (IZ16346)

  - A local privilege escalation vulnerability via file     creation can result in root-level access. (IZ12735)

  - There are possible buffer overflows involving 'XQUERY',     'XMLQUERY', 'XMLEXISTS', and 'XMLTABLE'. (IZ18434)

  - A specially crafted client CONNECT request could     crash the server. (IZ07299)

  - There is an unspecified remote buffer overflow in     DAS server code. (IZ22188)

  - INSTALL_JAR can be used to create or overwrite     critical system files. (IZ21983)

According to its version, the installation of IBM DB2 on the remote host is affected by one or more of the following vulnerabilities : 

  - There is an unspecified security vulnerability related to a 'DB2FMP' process (IZ20352).
  - There is an unspecified security vulnerability in a CLR-stored procedure deployment from IBM Database Add-Ins for Visual Studio (JR28432).
  - The password used to connect to the database can be seen in plaintext in a memory dump (JR27422).
  - There is a possible stack variable overrun in 'SQLRLAKA()' (IZ16346).
  - A local privilege escalation vulnerability via file creation can result in root-level access (IZ12735).
  - There are possible buffer overflows involving 'XQUERY',  'XMLQUERY', 'XMLEXISTS', and 'XMLTABLE' (IZ18434).

ID	Name	Product	Family	Severity
4680	DB2 < 8 FixPak 17 Multiple Vulnerabilities (deprecated)	Nessus Network Monitor	Database	high
34195	IBM DB2 8 < Fix Pack 17 Multiple Vulnerabilities	Nessus	Databases	critical
33128	IBM DB2 < 9 Fix Pack 5 Multiple Vulnerabilities	Nessus	Databases	critical
4536	IBM DB2 9.x < 9 Fix Pack 5 Multiple Vulnerabilities	Nessus Network Monitor	Database	critical

Detections

Analytics

CVE-2008-3856

critical

Tenable Plugins

high

critical

critical

critical