|
|
Info |
Last Modified |
| about 1 year ago |
|
|
|
|
|
Description |
SSH Tectia Server for IBM z/OS contains a flaw that may allow a local denial of service. The issue is triggered due to the pid file permissions are world-writable, allowing a local attacker to modify the pid content into an arbitrary process ID which will be processed during start or stop operations by the SSH daemon scripts. This flaw could results in a loss of availability for the system.
|
|
Classification |
Location:
Local Access Required
Attack Type:
Denial of Service
Impact:
Loss of Availability
Exploit:
Exploit Available
Disclosure:
OSVDB Verified
|
|
Solution |
Upgrade to version 5.4.0 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
|
|
Products |
|
SSH Tectia Server
 |
5.3.0 for IBM z/OS |
5.2.0 for IBM z/OS |
5.1.0 for IBM z/OS |
|
|
|
|
Credit |
Unknown or Incomplete
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
