73 matches found
CVE-2002-1822
IBM HTTP Server 1.0 on AS/400 allows remote attackers to obtain the path to the web root directory and other sensitive information, which is leaked in an error mesage when a request is made for a non-existent Java Server Page JSP...
CVE-2002-1731
The System Request menu in IBM AS/400 allows local users to list valid user accounts by viewing the object names that are type USRPRF...
CVE-1999-1279
An interaction between the AS/400 shared folders feature and Microsoft SNA Server 3.0 and earlier allows users to view each other's folders when the users share the same Local APPC LU...
CVE-1999-1279
The CVE describes an interaction between the AS/400 shared folders feature and Microsoft SNA Server 3.0 and earlier that allows users to view each other’s folders when the users share the same Local APPC LU. Affected components include AS/400 shared folders and Microsoft SNA Server 3.0 and earlie...
Получение списка пользователей через 'system request' в IBM AS/400
Через функцию system request можно просматривать объекты типа USRPRF...
IBM AS/400 HTTP Server '/' attack
IBM's HTTP Server on the AS/400 platform is vulnerable to an attack that will show the source code of the page -- such as an .html or .jsp page -- by attaching an '/' to the end of a URL. Compare these two URL's: http://www.foo.com/getsource.jsp http://www.foo.com/getsource.jsp/ The later URL wil...
IBM HTTP Server 1.3.x - Source Code Disclosure
IBM HTTP Server 1.3.x - Source Code Disclosure source: https://www.securityfocus.com/bid/3518/info Due to an input validation error in IBM HTTP Server for the AS/400, it is possible for a remote attacker to make a specially web crafted web request which will display script source code. If a '/' i...
IBM HTTP Server on AS/400 Trailing Slash Source Code Disclosure
IBM's HTTP Server on the AS/400 platform is vulnerable to an attack that will show the source code of the page -- such as a .html or .jsp page -- by attaching an '/' to the end of a URL. %NASLMINLEVEL 70300 This script was written by Felix Huber Script audit and contributions from Carmichael...
CVE-2000-1038
The CVE-2000-1038 entry concerns the IBM AS/400 Firewall web administration interface. It states that remote attackers can cause a Denial of Service via an empty GET request. The NVD metrics show a Network attack vector with low complexity and no authentication, resulting in Partial availability ...
CVE-2000-1038
The web administration interface for IBM AS/400 Firewall allows remote attackers to cause a denial of service via an empty GET request...
CVE-2000-1038
The web administration interface for IBM AS/400 Firewall allows remote attackers to cause a denial of service via an empty GET request...
ibm.as400.smtp.DoS.txt
Date: Tue, 4 May 1999 08:53:14 +0200 From: Joachim Larsson To: [email protected] Subject: AS/400 Hello all. I played around with smtp on a as/400+domino machine and found two obvious bugs, then notified IBM, revieved a ptf, then posted here. 1: telnet host 25, then start feeding chars. After...