CVE-2008-3856: High severity ibm db2 universal database vulnerability

Published Aug 28, 2008
·
Updated

The routine infrastructure component in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP1 on Unix and Linux does not change the ownership of the db2fmp process, which has unknown impact and attack vectors.

Affected Software

119 affected components
IBM DB2 Universal Database=8-fp4a
IBM DB2 Universal Database=8-fp4
IBM DB2 Universal Database=8-fp13
IBM DB2 Universal Database=8-fp5
IBM DB2 Universal Database=8-fp11
IBM DB2 Universal Database<=8
IBM DB2 Universal Database=8-fp2
IBM DB2 Universal Database=8-fp15
IBM DB2 Universal Database=8-fp2
IBM DB2 Universal Database=8-fp7b
IBM DB2 Universal Database=8-fp14
IBM DB2 Universal Database=8-fp4a
IBM DB2 Universal Database=8-fp13
IBM DB2 Universal Database=9.1-fp4
IBM DB2 Universal Database=8-fp12
IBM DB2 Universal Database=8-fp5
IBM DB2 Universal Database=8-fp6a
IBM DB2 Universal Database=8-fp2
IBM DB2 Universal Database=8-fp12
IBM DB2 Universal Database=8-fp3
IBM DB2 Universal Database<=8
IBM DB2 Universal Database=8-fp8
IBM DB2 Universal Database=8-fp7b
IBM DB2 Universal Database=8-fp4
IBM DB2 Universal Database=8-fp10
IBM DB2 Universal Database=8-fp14
IBM DB2 Universal Database=8-fp9
IBM DB2 Universal Database=8-fp6b
IBM DB2 Universal Database=8-fp14
IBM DB2 Universal Database=8-fp9
IBM DB2 Universal Database<=9.1
IBM DB2 Universal Database=9.1-fp4
IBM DB2 Universal Database=8-fp4a
IBM DB2 Universal Database<=9.1
IBM DB2 Universal Database=8.0
IBM DB2 Universal Database=8-fp9a
IBM DB2 Universal Database=8-fp10
IBM DB2 Universal Database=9.1-fp2
IBM DB2 Universal Database=9.1-fp3
IBM DB2 Universal Database=8-fp6a
IBM DB2 Universal Database=8.0
IBM DB2 Universal Database=8-fp11
IBM DB2 Universal Database=8-fp8
IBM DB2 Universal Database=8-fp6b
IBM DB2 Universal Database=8-fp4
IBM DB2 Universal Database=9.1
IBM DB2 Universal Database=8-fp6
IBM DB2 Universal Database=8.0
IBM DB2 Universal Database=8-fp5
IBM DB2 Universal Database<=9.1
IBM DB2 Universal Database=9.1-fp3
IBM DB2 Universal Database=9.1-fp4
IBM DB2 Universal Database=9.1-fp2
IBM DB2 Universal Database=8-fp9a
IBM DB2 Universal Database<=8
IBM DB2 Universal Database=8-fp1
IBM DB2 Universal Database=8-fp6c
IBM DB2 Universal Database=8-fp15
IBM DB2 Universal Database=8-fp3
IBM DB2 Universal Database=8-fp8
IBM DB2 Universal Database=8-fp8a
IBM DB2 Universal Database=9.1-fp2
IBM DB2 Universal Database=8-fp1
IBM DB2 Universal Database=8-fp7a
IBM DB2 Universal Database=8-fp7a
IBM DB2 Universal Database=9.1-fp3
IBM DB2 Universal Database=8-fp7a
IBM DB2 Universal Database=8-fp9a
IBM DB2 Universal Database=8-fp6
IBM DB2 Universal Database=8-fp11
IBM DB2 Universal Database=8-fp9a
IBM DB2 Universal Database<=8
IBM DB2 Universal Database=8-fp11
IBM DB2 Universal Database=8-fp4
IBM DB2 Universal Database=8-fp3
IBM DB2 Universal Database=8-fp13
IBM DB2 Universal Database=8-fp6a
IBM DB2 Universal Database=8-fp6b
IBM DB2 Universal Database=8-fp1
IBM DB2 Universal Database=8-fp15
IBM DB2 Universal Database=8-fp7b
IBM DB2 Universal Database=8-fp6c
IBM DB2 Universal Database=8-fp7
IBM DB2 Universal Database=8-fp2
IBM DB2 Universal Database=9.1-fp3
IBM DB2 Universal Database=8-fp6c
IBM DB2 Universal Database=8-fp14
IBM DB2 Universal Database=8-fp7
IBM DB2 Universal Database=9.1-fp2
IBM DB2 Universal Database=8-fp8a
IBM DB2 Universal Database=8-fp10
IBM DB2 Universal Database=8-fp7
IBM DB2 Universal Database=8-fp4a
IBM DB2 Universal Database=8-fp6a
IBM DB2 Universal Database=8-fp6c
IBM DB2 Universal Database=8-fp15
IBM DB2 Universal Database=8-fp9
IBM DB2 Universal Database=9.1-fp4
IBM DB2 Universal Database=8-fp5
IBM DB2 Universal Database=8.0
IBM DB2 Universal Database=8-fp7
IBM DB2 Universal Database=9.1
IBM DB2 Universal Database=8-fp7b
IBM DB2 Universal Database=8-fp8a
IBM DB2 Universal Database=8-fp9
IBM DB2 Universal Database=8-fp6
IBM DB2 Universal Database=8-fp6
IBM DB2 Universal Database=8-fp13
IBM DB2 Universal Database=8-fp8a
IBM DB2 Universal Database=8-fp6b
IBM DB2 Universal Database=8-fp12
IBM DB2 Universal Database=9.1
IBM DB2 Universal Database=9.1
IBM DB2 Universal Database=8-fp10
IBM DB2 Universal Database<=9.1
IBM DB2 Universal Database=8-fp7a
IBM DB2 Universal Database=8-fp8
IBM DB2 Universal Database=8-fp3
IBM DB2 Universal Database=8-fp12

Remediation

Patch Available

http://www-01.ibm.com/support/docview.wss?uid=swg1IZ19155

Patch Available

http://www-1.ibm.com/support/docview.wss?uid=swg1IZ20352

Patch Available

http://www-1.ibm.com/support/docview.wss?uid=swg21255607

Patch Available

http://www.securityfocus.com/bid/29601

Event History

Aug 28, 2008
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description

Frequently Asked Questions

1

What is the impact of CVE-2008-3856?

The impact of CVE-2008-3856 is currently unknown due to the lack of information regarding exploit vectors.

2

What are the affected versions in CVE-2008-3856?

CVE-2008-3856 affects IBM DB2 versions prior to FP17 for 8.x, FP5 for 9.1, and FP1 for 9.5 on Unix and Linux systems.

3

How can I mitigate CVE-2008-3856?

To mitigate CVE-2008-3856, it is recommended to upgrade to the latest patch level of IBM DB2.

4

Does CVE-2008-3856 have a known exploit?

Currently, there are no known exploits for CVE-2008-3856.

5

Who should be concerned about CVE-2008-3856?

Organizations using affected versions of IBM DB2 on Unix or Linux should monitor for updates related to CVE-2008-3856.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203