Unscored CVE-2005-1025 EUVD-2005-1028GHSA-vh84-vf5v-vg64

The FTP server in AS/400 4.3, when running in IFS mode, allows remote attackers to obtain sensitive information via a symlink attack using …

Published Apr 9, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

The FTP server in AS/400 4.3, when running in IFS mode, allows remote attackers to obtain sensitive information via a symlink attack using RCMD and the ADDLNK utility, as demonstrated using the QSYS.LIB library.

References

15300 vdb-entry
http://www.venera.com/downloads/AS400_user_accounts_ftp_disclosure.pdf
20050404 Disclosure of AS/400 user accounts via the FTP server mailing-list