Beveiligingsadvies

CVE-2005-1238

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2005-04-24 04:00:00

Laatst bijgewerkt 2024-08-07 21:44:05

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

By design, the built-in FTP server for iSeries AS/400 systems does not support a restricted document root, which allows attackers to read or write arbitrary files, including sensitive QSYS databases, via a full pathname in a GET or PUT request.

← Alle CVE's bekijken Bekijk op cve.org ↗