iseries as 400 vulnerabilities and exploits

(subscribe to this query)

By design, the built-in FTP server for iSeries AS/400 systems does not support a restricted document root, which allows malicious users to read or write arbitrary files, including sensitive QSYS databases, via a full pathname in a GET or PUT request.

Ibm Iseries As 400

The POP3 server in IBM iSeries AS/400 returns different error messages when the user exists or not, which allows remote malicious users to determine valid user IDs on the server.

Ibm Iseries As 400

The FTP server in AS/400 4.3, when running in IFS mode, allows remote malicious users to obtain sensitive information via a symlink attack using RCMD and the ADDLNK utility, as demonstrated using the QSYS.LIB library.

Ibm Iseries As 400 4.3

Directory traversal vulnerability in the third party tool from NetIQ, as used to secure the iSeries AS/400 FTP server, allows remote malicious users to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request. NOTE: the vendor has dispu...

Netiq Pssecure 7.5

Directory traversal vulnerability in the third party tool from Castlehill, as used to secure the iSeries AS/400 FTP server, allows remote malicious users to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request.

Castlehill Secure Net

Directory traversal vulnerability in the third party tool from Powertech, as used to secure the iSeries AS/400 FTP server, allows remote malicious users to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request.

Powertech Powerlock Networksecurity 4.7.1

Directory traversal vulnerability in the third party tool from SafeStone, as used to secure the iSeries AS/400 FTP server, allows remote malicious users to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request.

Safestone Technologies Axcessit

Directory traversal vulnerability in the third party tool from Bsafe, as used to secure the iSeries AS/400 FTP server, allows remote malicious users to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request.

Bsafe Global Security

Directory traversal vulnerability in the third party tool from Raz-Lee, as used to secure the iSeries AS/400 FTP server, allows remote malicious users to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request.

Raz-lee Security\\+\\+\\+

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook