← Back

CVE-2005-0868

nvd nist
Published: May 2, 2005Modified: Apr 16, 2026

JSON object

Loading...
7.5
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 10.0 / Impact: 6.4
Source: NVD

Description

AS/400 Telnet 5250 terminal emulation clients, as implemented by (1) IBM client access, (2) Bosanova, (3) PowerTerm, (4) Mochasoft, and possibly other emulations, allows malicious AS/400 servers to execute arbitrary commands via a STRPCO (Start PC Organizer) command followed by STRPCCMD (Start PC command), as demonstrated by creating a backdoor account using REXEC.

Affected (4)

Products: Bosanova: Launcher400 · Ibm: Client Access · Mochasoft: Tn5250 · +1 more
Show all products
Bosanova: Launcher400 · Ibm: Client Access · Mochasoft: Tn5250 · Powerterm: Interconnect
Bosanova
1 product
Launcher400
Ibm
1 product
Client Access
Mochasoft
1 product
Tn5250
Powerterm
1 product
Interconnect
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Launcher400
All versions
Client Access
All versions
Tn5250
All versions
Interconnect
All versions

References (4)

Source: cve@mitre.org
Source: cve@mitre.org
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit

Timeline

No history available yet.