CVE Feed

    Dashboard / CVE / CVE-2002-1731

    CVE-2002-1731

    The System Request menu in IBM AS/400 allows local users to list valid user accounts by viewing the object names that are type USRPRF.

    Published:Dec 31, 2002
    Last Modified:Apr 16, 2026
    EPS:Jun 21, 2005
    EPSS Score:0.01715
    CVSS Score:2.1

    Affected Products

    Vendor
    Ibm
    Product
    Os 400

    Exploits

    http://www.securityfocus.com/bid/4059http://www.securityfocus.com/bid/4059https://www.exploit-db.com/exploits/21283

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2008-2709 (CVSS 4.7) — Buffer overflow in the BrSmRcvAndCheck function in the RCHMGR module on IBM OS/400 V5R4M0, V5R4M5, and V6R1M0 …
    CVE-2008-0694 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in the HTTP Server in IBM OS/400 V5R3M0 and V5R4M0 allows remote atta…
    CVE-2007-3537 (CVSS 7.8) — IBM OS/400 (aka i5/OS) V4R2M0 through V5R3M0 on iSeries machines sends responses to TCP SYN-FIN packets, which…
    CVE-2007-1916 (CVSS 10) — Buffer overflow in the RFC_START_GUI function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remo…
    CVE-2007-1918 (CVSS 5) — The RFC_SET_REG_SERVER_PROPERTY function in the SAP RFC Library 6.40 and 7.00 before 20070109 implements an op…
    CVE-2007-1917 (CVSS 10) — Buffer overflow in the SYSTEM_CREATE_INSTANCE function in the SAP RFC Library 6.40 and 7.00 before 20061211 al…
    CVE-2007-1913 (CVSS 5) — The TRUSTED_SYSTEM_SECURITY function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attack…
    CVE-2007-1915 (CVSS 7.5) — Buffer overflow in the RFC_START_PROGRAM function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows …
    CVE-2007-0442 (CVSS 5) — Unspecified vulnerability in IBM OS/400 R530 and R535 has unknown impact and remote attack vectors, related to…
    CVE-2006-6836 (CVSS 10) — Multiple unspecified vulnerabilities in osp-cert in IBM OS/400 V5R3M0 have unspecified impact and attack vecto…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High