OSVDB ID: 35014 Title: SSH Tectia Server for IBM z/OS pid File Permission Weakness Local |
Info |
|
|
Dates |
||||
|
|
Description |
SSH Tectia Server for IBM z/OS contains a flaw that may allow a local denial of service. The issue is triggered due to the pid file permissions are world-writable, allowing a local attacker to modify the pid content into an arbitrary process ID which will be processed during start or stop operations by the SSH daemon scripts. This flaw could results in a loss of availability for the system. |
Classification |
Location:
Local Access Required
Attack Type: Denial of Service Impact: Loss of Availability Exploit: Exploit Public Disclosure: OSVDB Verified, Vendor Verified OSVDB: Security Software |
Solution |
Upgrade to version 5.4.0 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |