IBM DB2及DB2 Connect权限提升漏洞

受影响系统：
IBM DB2 Connect 9.x
描述：
--------------------------------------------------------------------------------
BUGTRAQ ID: 67616
CVE(CAN) ID: CVE-2013-6744

IBM DB2是一个大型的商业关系数据库系统。DB2 Connect可将PC和移动设备连接到组织的大型机。

IBM DB2及DB2 Connect存在权限提升漏洞，成功利用此漏洞可使攻击者以提升的权限获取DB2实例。受影响产品如下：IBM DB2 Express Edition
IBM DB2 Workgroup Server Edition
IBM DB2 Enterprise Server Edition
IBM DB2 Connect Application Server Edition
IBM DB2 Connect Application Server Advanced Edition
IBM DB2 Connect Enterprise Edition
IBM DB2 Connect Unlimited Edition for System i
IBM DB2 Connect Unlimited Edition for System z
IBM DB2 Connect Unlimited Advanced Edition for System z
IBM DB2 10.1 pureScale Feature
IBM DB2 10.5 Advanced Enterprise Server Edition
IBM DB2 10.5 Advanced Workgroup Server Edition
IBM DB2 10.5 Developer Edition for Linux, Unix, Windows

<*来源：Danny Tsechansky
*>

建议：
--------------------------------------------------------------------------------
厂商补丁：

IBM
---
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：

http://www.ibm.com/support/fixcentral/