FTP Server on iSeries AS/400 Systems Allows Arbitrary File Access and Modification

CVE-2005-1238 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

By design, the built-in FTP server for iSeries AS/400 systems does not support a restricted document root, which allows attackers to read or write arbitrary files, including sensitive QSYS databases, via a full pathname in a GET or PUT request.

Learn more about our Cis Benchmark Audit For Server Software.