JR30228: SECURITY VULNERABILITY: DB2FMP PROCESS ON WINDOWS RUNNING WITH O S PRIVILEGE.

APAR status

• Closed as program error.

Error description

• On Windows, db2fmp process is running with OS privilege.
  This problem was reported to IBM by Cesar Cerrudo of
  ApplicationSecurity Inc.
  

Local fix

Problem summary

• ****************************************************************
  USERS AFFECTED:
  DB2 v82 on all Windows platforms
  ****************************************************************
  PROBLEM DESCRIPTION:
  On Windows, db2fmp process is running with OS privilege.
  This problem was reported to IBM by Cesar Cerrudo of
  ApplicationSecurity Inc.
  ****************************************************************
  RECOMMENDATION:
  Upgrade to DB2 v8.2 FP16
  Please refer to Technote "OS permission of db2fmp process on
  Windows" (Reference #   7013059)
  http://www-01.ibm.com/support/docview.wss?rs=0&context=SWB30&dc=
  DA400&q1=7013059&uid=swg27013059&loc=en_US&cs=utf-8&cc=us&lang=e
  n
  ****************************************************************
  

Problem conclusion

• Please refer to Technote "OS permission of db2fmp process on
  Windows" (Reference #   7013059)
  http://www-01.ibm.com/support/docview.wss?rs=0&context=SWB30&dc=
  DA400&q1=7013059&uid=swg27013059&loc=en_US&cs=utf-8&cc=us&lang=e
  n
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  JR30026

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  DB2 UDB ESE WIN

• Fixed component ID

  5765F4101

Applicable component levels

• R820 PSN

     UP