• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

IBM DB2 Insecure DMS Directory Permissions Vulnerability

IBM DB2 creates DMS (Database Managed Space) directories with world-writeable permissions (mode 777). Malicious local users could take advantage of this issue to delete or tamper with files in these directories.

This issue was reported to exist on AIX releases of the software.