• info
• discussion
• exploit
• solution
• references

IBM DB2 Remote Command Server Privilege Escalation Vulnerability

Solution:
IBM has addressed this issue in FixPax 5 for DB2 on Windows platforms.


IBM DB2 Universal Database for Windows 8.1

• IBM FixPak 5 for Windows DB2 98/ME/NT4/2K/XP/2003 32-Bit
  http://www-306.ibm.com/cgi-bin/db2www/data/db2/udb/winos2unix/support/ newwinv8fp.d2w/report?launchedfrom=download&fp=5&ptfnum=WR21334&os=WIN -32&url=ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db 2winIA32v8/fixpak/FP5_WR21334/


• IBM FixPak 5 for Windows DB2 XP/2003 64-Bit
  http://www-306.ibm.com/cgi-bin/db2www/data/db2/udb/winos2unix/support/ newwinv8fp.d2w/report?launchedfrom=download&fp=5&ptfnum=WR21335&os=WIN -64&url=ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db 2winIA64v8/fixpak/FP5_WR21335/