The Install component in IBM DB2 9.5 before FP5 and 9.7 before FP1 configures the High Availability (HA) scripts with incorrect file-permission and authorization settings, which has unknown impact and local attack vectors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Db2 | Ibm | 9.5 (including) | 9.5 (including) |
| Db2 | Ibm | 9.5-fp1 (including) | 9.5-fp1 (including) |
| Db2 | Ibm | 9.5-fp2 (including) | 9.5-fp2 (including) |
| Db2 | Ibm | 9.5-fp2a (including) | 9.5-fp2a (including) |
| Db2 | Ibm | 9.5-fp3 (including) | 9.5-fp3 (including) |
| Db2 | Ibm | 9.5-fp3a (including) | 9.5-fp3a (including) |
| Db2 | Ibm | 9.5-fp3b (including) | 9.5-fp3b (including) |
| Db2 | Ibm | 9.7 (including) | 9.7 (including) |