CVE Feed

    Dashboard / CVE / CVE-2007-3537

    CVE-2007-3537

    IBM OS/400 (aka i5/OS) V4R2M0 through V5R3M0 on iSeries machines sends responses to TCP SYN-FIN packets, which allows remote attackers to obtain system information and possibly bypass firewall rules.

    Published:Jul 3, 2007
    Last Modified:Apr 23, 2026
    EPS:Jul 3, 2007
    EPSS Score:0.00733
    CVSS Score:7.8

    Affected Products

    Vendor
    Ibm
    Product
    Os 400

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2008-2709 (CVSS 4.7) — Buffer overflow in the BrSmRcvAndCheck function in the RCHMGR module on IBM OS/400 V5R4M0, V5R4M5, and V6R1M0 …
    CVE-2008-0694 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in the HTTP Server in IBM OS/400 V5R3M0 and V5R4M0 allows remote atta…
    CVE-2007-1916 (CVSS 10) — Buffer overflow in the RFC_START_GUI function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remo…
    CVE-2007-1918 (CVSS 5) — The RFC_SET_REG_SERVER_PROPERTY function in the SAP RFC Library 6.40 and 7.00 before 20070109 implements an op…
    CVE-2007-1917 (CVSS 10) — Buffer overflow in the SYSTEM_CREATE_INSTANCE function in the SAP RFC Library 6.40 and 7.00 before 20061211 al…
    CVE-2007-1913 (CVSS 5) — The TRUSTED_SYSTEM_SECURITY function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attack…
    CVE-2007-1915 (CVSS 7.5) — Buffer overflow in the RFC_START_PROGRAM function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows …
    CVE-2007-0442 (CVSS 5) — Unspecified vulnerability in IBM OS/400 R530 and R535 has unknown impact and remote attack vectors, related to…
    CVE-2006-6836 (CVSS 10) — Multiple unspecified vulnerabilities in osp-cert in IBM OS/400 V5R3M0 have unspecified impact and attack vecto…
    CVE-2005-1182 (CVSS 5) — Unknown vulnerability in Incoming Remote Command (iSeries Access for Windows Remote Command service) in IBM OS…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High