Vendor/product archive

ibm / iseries_as_400 CVEs

Beta · best-effort

3 CVEs tagged to ibm / iseries_as_400 — 0 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to ibm vendor archive

CVE-2005-1025

Published May 2, 2005

The FTP server in AS/400 4.3, when running in IFS mode, allows remote attackers to obtain sensitive information via a symlink attack using RCMD and the ADDLNK utility, as demonstr…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

CVE-2005-1133

Published May 2, 2005

The POP3 server in IBM iSeries AS/400 returns different error messages when the user exists or not, which allows remote attackers to determine valid user IDs on the server.

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

CVE-2005-1238

Published May 2, 2005

By design, the built-in FTP server for iSeries AS/400 systems does not support a restricted document root, which allows attackers to read or write arbitrary files, including sensi…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1