NVD

Id
54233  
Name
CVE-2007-2063  
Description
SSH Tectia Server for IBM z/OS before 5.4.0 uses insecure world-writable permissions for (1) the server pid file, which allows local users to cause arbitrary processes to be stopped, or (2) when _BPX_BATCH_UMASK is missing from the environment, creates HFS files with insecure permissions, which allows local users to read or modify these files and have other unknown impact.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-04-17  
Modified Date
2011-08-04  
Seq
2007-2063  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
275010 54233 CVE-2007-2063 1017913  View
275011 54233 CVE-2007-2063 23508  View
275012 54233 CVE-2007-2063 http://www.ssh.com/documents/33/SSH_Tectia_Server_5.4.0_zOS_releasenotes.txt  View
275013 54233 CVE-2007-2063 ADV-2007-1414  View
275014 54233 CVE-2007-2063 ssh-tectia-pid-hfs-privilege-escalation(33699)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56724 JVNDB-2007-005416 IBM z/OS 用の SSH Tectia Server における任意のプロセスを停止される脆弱性 IBM z/OS 用の SSH Tectia Server は、以下の脆弱性が存在します。 CVE-2007-2063 25418 CVE-2007-2063 54233 4.4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005416.html 2007-04-17 2012-12-20 View