CVE-2005-1244

ÉLEVÉE 7.5CVE-2005-1244 · Published 20/04/2005 · updated 16/06/2026

En bref

CVE-2005-1244 est une vulnérabilité ÉLEVÉE (CVSS 7.5) touchant pssecure (netiq).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.8%, plus élevée que 78.6% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
pssecure netiq	`= 7.5`	No fix yet

Description

Directory traversal vulnerability in the third party tool from NetIQ, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request. NOTE: the vendor has disputed this issue, saying that "neither NetIQ Security Manager nor our iSeries Security Solutions are vulnerable.

References

securitytracker.com/id · Exploit
osvdb.org/15791
securityfocus.com/archive/1/396628 · Exploit
venera.com/downloads/Canonicalization_problems_in_iSeries_FTP_security.pdf · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/20260

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free