CVE

Id
12450  
CVE No.
CVE-2005-1244  
Status
Candidate  
Description
** DISPUTED ** Directory traversal vulnerability in the third party tool from NetIQ, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request. NOTE: the vendor has disputed this issue, saying that "neither NetIQ Security Manager nor our iSeries Security Solutions are vulnerable."  
Phase
Assigned (20050424)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
89622 12450 CVE-2005-1244 BUGTRAQ:20050420 Canonicalization and directory traversal in iSeries FTP security products  View
89623 12450 CVE-2005-1244 URL:http://www.securityfocus.com/archive/1/396628  View
89624 12450 CVE-2005-1244 MISC:http://www.venera.com/downloads/Canonicalization_problems_in_iSeries_FTP_security.pdf  View
89625 12450 CVE-2005-1244 OSVDB:15791  View
89626 12450 CVE-2005-1244 URL:http://www.osvdb.org/15791  View
89627 12450 CVE-2005-1244 SECTRACK:1013810  View
89628 12450 CVE-2005-1244 URL:http://securitytracker.com/id?1013810  View
89629 12450 CVE-2005-1244 XF:multiple-vendor-security-bypass(20260)  View

Related JVN