CVE-2007-2063: SSH Tectia Server

Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days.

SSH Tectia Server for IBM z/OS before 5.4.0 uses insecure world-writable permissions for (1) the server pid file, which allows local users to cause arbitrary processes to be stopped, or (2) when _BPX_BATCH_UMASK is missing from the environment, creates HFS files with insecure permissions, which allows local users to read or modify these files and have other unknown impact.

Affected products

• SSH Tectia Server: up to and including 5.3.0; version 5.0 only; version 5.1.0 only; version 5.2.0 only

Published 2007-04-18. Last modified 2026-06-16.