AZL-7383
Dashboard / Vulnerabilities / AZL-7383
Summary: CVE-2005-0868 affecting package tn5250 0.17.4-26
Details: AS/400 Telnet 5250 terminal emulation clients, as implemented by (1) IBM client access, (2) Bosanova, (3) PowerTerm, (4) Mochasoft, and possibly other emulations, allows malicious AS/400 servers to execute arbitrary commands via a STRPCO (Start PC Organizer) command followed by STRPCCMD (Start PC command), as demonstrated by creating a backdoor account using REXEC.
References: https://nvd.nist.gov/vuln/detail/CVE-2005-0868
Affected packages
Package
Name: tn5250
Purl: pkg:rpm/azure-linux/tn5250
Affected ranges
Type: ECOSYSTEM
Events:
Introduced- 0
Fixed -None
Affected versions
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
