Vulnerabilities > CVE-2005-1241 - Unspecified vulnerability in Powertech Powerlock Networksecurity 4.7.1

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
powertech

Summary

Directory traversal vulnerability in the third party tool from Powertech, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request.

Vulnerable Configurations

Part Description Count
Application
Powertech
1