Back to search
CVE-2005-0868
Published: Mar 26, 2005
Modified: Aug 7, 2024
PUBLISHED
Description
AS/400 Telnet 5250 terminal emulation clients, as implemented by (1) IBM client access, (2) Bosanova, (3) PowerTerm, (4) Mochasoft, and possibly other emulations, allows malicious AS/400 servers to execute arbitrary commands via a STRPCO (Start PC Organizer) command followed by STRPCCMD (Start PC command), as demonstrated by creating a backdoor account using REXEC.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
20050323 Backdoors in AS/400 emulations allow the server to attack connected PC workstations
mailing-list
x_refsource_BUGTRAQ
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now