Ibm

Os 400

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.7

CVE-2008-2709

  • EPSS 0.33%
  • Veröffentlicht 16.06.2008 20:41:00
  • Zuletzt bearbeitet 16.06.2026 22:54:16

Buffer overflow in the BrSmRcvAndCheck function in the RCHMGR module on IBM OS/400 V5R4M0, V5R4M5, and V6R1M0 allows local users to cause a denial of service (task halt and main storage dump) via unspecified vectors involving the running of diagnosti...

4.3

CVE-2008-0694

  • EPSS 1.03%
  • Veröffentlicht 12.02.2008 01:00:00
  • Zuletzt bearbeitet 16.06.2026 22:50:09

Cross-site scripting (XSS) vulnerability in the HTTP Server in IBM OS/400 V5R3M0 and V5R4M0 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header.

7.8

CVE-2007-3537

  • EPSS 1.5%
  • Veröffentlicht 03.07.2007 20:30:00
  • Zuletzt bearbeitet 16.06.2026 22:42:14

IBM OS/400 (aka i5/OS) V4R2M0 through V5R3M0 on iSeries machines sends responses to TCP SYN-FIN packets, which allows remote attackers to obtain system information and possibly bypass firewall rules.

5

CVE-2007-0442

  • EPSS 1.02%
  • Veröffentlicht 23.01.2007 16:28:00
  • Zuletzt bearbeitet 16.06.2026 22:35:34

Unspecified vulnerability in IBM OS/400 R530 and R535 has unknown impact and remote attack vectors, related to an "Integrity Problem" involving LIC-TCPIP and TCP reset. NOTE: it is possible that this issue is related to CVE-2004-0230, but this is no...

10

CVE-2006-6836

  • EPSS 1.5%
  • Veröffentlicht 31.12.2006 05:00:00
  • Zuletzt bearbeitet 16.06.2026 22:33:53

Multiple unspecified vulnerabilities in osp-cert in IBM OS/400 V5R3M0 have unspecified impact and attack vectors, related to ASN.1 parsing.

2.1

CVE-2005-0899

  • EPSS 0.48%
  • Veröffentlicht 02.05.2005 04:00:00
  • Zuletzt bearbeitet 16.06.2026 22:12:00

AS/400 running OS400 5.2 installs and enables LDAP by default, which allows remote authenticated users to obtain OS/400 user profiles by performing a search.

5

CVE-2005-1182

  • EPSS 1.32%
  • Veröffentlicht 02.05.2005 04:00:00
  • Zuletzt bearbeitet 16.06.2026 22:12:36

Unknown vulnerability in Incoming Remote Command (iSeries Access for Windows Remote Command service) in IBM OS/400 R510, R520, and R530 allows attackers to cause a denial of service (IRC shutdown) via certain inputs.

2.1

CVE-2002-1731

Exploit
  • EPSS 0.84%
  • Veröffentlicht 31.12.2002 05:00:00
  • Zuletzt bearbeitet 16.06.2026 21:59:53

The System Request menu in IBM AS/400 allows local users to list valid user accounts by viewing the object names that are type USRPRF.