CVE-2005-1244 - CVE House
Back to Database
Status published High CVE-2005-1244

Directory traversal vulnerability in the third party tool from NetIQ,...

Vulnerability Description

Directory traversal vulnerability in the third party tool from NetIQ, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request. NOTE: the vendor has disputed this issue, saying that "neither NetIQ Security Manager nor our iSeries Security Solutions are vulnerable.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-1244

Credits & Attribution

No credits recorded in the NVD database.

References

More from netiq

View All →
CVE-2016-1605
Directory traversal vulnerability in the ReportViewServlet servlet in the server...
Medium 6.5
CVE-2014-4509
The MKDQUOTESAFE function in the Fan-out driver scripts in Fan-Out...
Medium 4.6
CVE-2007-4526
The Client Login Extension (CLE) in Novell Identity Manager before...
Low 2.1
CVE-2006-4803
The Fan-Out Linux and UNIX receiver scripts in Novell Identity...
High 7.2
CVE-2006-4506
idmlib.sh in nxdrv in Novell Identity Manager (IDM) 3.0.1 allows...
Low 3.6

Affected Vendor

Affected Software

pssecure
Vulnerable Versions:
7.5

Timeline

Official Publish: April 24th, 2005
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.