5016 matches found
CVE-2005-0868
CVE-2005-0868 affects AS/400 Telnet 5250 terminal emulation clients, including IBM client access, Bosanova, PowerTerm, Mochasoft (and possibly others). The root issue allows a malicious AS/400 server to execute arbitrary commands by sending a STRPCO (Start PC Organizer) command followed by STRPCC...
CVE-2005-0868: Undefined Security Weakness
AS/400 Telnet 5250 terminal emulation clients, as implemented by 1 IBM client access, 2 Bosanova, 3 PowerTerm, 4 Mochasoft, and possibly other emulations, allows malicious AS/400 servers to execute arbitrary commands via a STRPCO Start PC Organizer command followed by STRPCCMD Start PC command, a...
AS/400 terminal client backdoor functions
There are few terminal function allows to execute command on client PC...
Backdoors in AS/400 emulations allow the server to attack connected PC workstations
Backdoors in AS/400 emulations allow the server to attack connected PC workstations Summary: Nowadays, when working with legacy AS/400 applications, most people use Telnet based terminal emulation programs, for example IBM Client Access. The issue found is using these emulations in an unplanned...
Microsoft Internet Explorer 6 - HREF Save As Denial of Service
Microsoft Internet Explorer 6 - HREF Save As Denial of Service source: https://www.securityfocus.com/bid/10552/info A vulnerability is reported to exist in Internet Explorer that may allow an attacker to cause the application to crash. The issue presents itself when a user attempts to invoke the...
CVE-2003-0937: Undefined Security Weakness
SCO UnixWare 7.1.1, 7.1.3, and Open UNIX 8.0.0 allows local users to bypass protections for the "as" address space file for a process ID PID by obtaining a procfs file descriptor for the file and calling execve on a setuid or setgid program, which leaves the descriptor open to the user...
CVE-2002-1822
IBM HTTP Server 1.0 on AS/400 allows remote attackers to obtain the path to the web root directory and other sensitive information, which is leaked in an error mesage when a request is made for a non-existent Java Server Page JSP...
CVE-2002-1731
The System Request menu in IBM AS/400 allows local users to list valid user accounts by viewing the object names that are type USRPRF...
PT-2002-2438 · Microsoft · Office Xp
Name of the Vulnerable Software and Affected Versions: Microsoft Office XP Description: The issue concerns the Host function in the Microsoft spreadsheet component, which allows remote attackers to create arbitrary files using the SaveAs capability. Recommendations: For Microsoft Office XP,...
CVE-1999-1279
An interaction between the AS/400 shared folders feature and Microsoft SNA Server 3.0 and earlier allows users to view each other's folders when the users share the same Local APPC LU...
CVE-1999-1279
The CVE describes an interaction between the AS/400 shared folders feature and Microsoft SNA Server 3.0 and earlier that allows users to view each other’s folders when the users share the same Local APPC LU. Affected components include AS/400 shared folders and Microsoft SNA Server 3.0 and earlie...
CVE-1999-1279: Undefined Security Weakness
An interaction between the AS/400 shared folders feature and Microsoft SNA Server 3.0 and earlier allows users to view each other's folders when the users share the same Local APPC LU...
Получение списка пользователей через 'system request' в IBM AS/400
Через функцию system request можно просматривать объекты типа USRPRF...
IBM AS/400 HTTP Server '/' attack
IBM's HTTP Server on the AS/400 platform is vulnerable to an attack that will show the source code of the page -- such as an .html or .jsp page -- by attaching an '/' to the end of a URL. Compare these two URL's: http://www.foo.com/getsource.jsp http://www.foo.com/getsource.jsp/ The later URL wil...
IBM HTTP Server 1.3.x - Source Code Disclosure
IBM HTTP Server 1.3.x - Source Code Disclosure source: https://www.securityfocus.com/bid/3518/info Due to an input validation error in IBM HTTP Server for the AS/400, it is possible for a remote attacker to make a specially web crafted web request which will display script source code. If a '/' i...
IBM HTTP Server on AS/400 Trailing Slash Source Code Disclosure
IBM's HTTP Server on the AS/400 platform is vulnerable to an attack that will show the source code of the page -- such as a .html or .jsp page -- by attaching an '/' to the end of a URL. %NASLMINLEVEL 70300 This script was written by Felix Huber Script audit and contributions from Carmichael...
Доступ к защищенным документам Adobe (protection bypass)
Можно скопировать содержимое защищенного документа используя функцию "Save As"...
CVE-1999-1012: Undefined Security Weakness
SMTP component of Lotus Domino 4.6.1 on AS/400, and possibly other operating systems, allows a remote attacker to crash the mail server via a long string...
CVE-2000-1038
The CVE-2000-1038 entry concerns the IBM AS/400 Firewall web administration interface. It states that remote attackers can cause a Denial of Service via an empty GET request. The NVD metrics show a Network attack vector with low complexity and no authentication, resulting in Partial availability ...