Unscored severity · published Apr 18, 2007
CVE-2007-2063
SSH Tectia Server for IBM z/OS before 5.4.0 uses insecure world-writable permissions for (1) the server pid file, which allows local users to cause arbitrary processes to be…
–
CVSS
0.3%
EPSS
No
On KEV
Description
SSH Tectia Server for IBM z/OS before 5.4.0 uses insecure world-writable permissions for (1) the server pid file, which allows local users to cause arbitrary processes to be stopped, or (2) when _BPX_BATCH_UMASK is missing from the environment, creates HFS files with insecure permissions, which allows local users to read or modify these files and have other unknown impact.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 23% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TS
Tectia Server · Ssh
through 5.3.0; 5.0; 5.1.0; 5.2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2063
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2063
osvdb.org
http://osvdb.org/34998
Patch
http://secunia.com/advisories/24916
securitytracker.com
http://securitytracker.com/id?1017913
www.osvdb.org
http://www.osvdb.org/35014
www.securityfocus.com
http://www.securityfocus.com/bid/23508
www.ssh.com
http://www.ssh.com/documents/33/SSH_Tectia_Server_5.4.0_zOS_releasenotes.txt
More from Tectia Server
8.8
CVE-2021-27891
SSH Tectia Client and Server before 6.4.19 on Windows have weak key generation
7.8
CVE-2021-27892
SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation
7.0
CVE-2021-27893
SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation in nonstandard conditions
3.7
CVE-2008-5161
Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and…
–
CVE-2012-5975
The SSH USERAUTH CHANGE REQUEST feature in SSH Tectia Server 6.0.4 through 6.0.20, 6.1.0 through 6.1.12, 6.2.0 through 6.2.5, and 6.3.0 through 6.3.2 on UNIX and Linux, when…