Os 400

os_400

Vendor: Ibm • 8 CVEs

CVEs (8)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-2709 1Ibm 1Os 400 Apr 23, 2026 Jun 16, 2008 N/A· v4 N/A· v3 4.7 MEDIUM· v2 Buffer overflow in the BrSmRcvAndCheck function in the RCHMGR module on IBM OS/400 V5R4M0, V5R4M5, and V6R1M0 allows local users to cause a denial of service (task halt and main storage dump) via unspecified vectors invo...Show more Buffer overflow in the BrSmRcvAndCheck function in the RCHMGR module on IBM OS/400 V5R4M0, V5R4M5, and V6R1M0 allows local users to cause a denial of service (task halt and main storage dump) via unspecified vectors involving the running of diagnostics on a modem port. NOTE: there might be limited attack scenarios.Show less
CVE-2008-0694 1Ibm 1Os 400 Apr 23, 2026 Feb 12, 2008 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the HTTP Server in IBM OS/400 V5R3M0 and V5R4M0 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header.
CVE-2007-3537 1Ibm 1Os 400 Apr 23, 2026 Jul 3, 2007 N/A· v4 N/A· v3 7.8 HIGH· v2 IBM OS/400 (aka i5/OS) V4R2M0 through V5R3M0 on iSeries machines sends responses to TCP SYN-FIN packets, which allows remote attackers to obtain system information and possibly bypass firewall rules.
CVE-2007-0442 1Ibm 1Os 400 Apr 23, 2026 Jan 23, 2007 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Unspecified vulnerability in IBM OS/400 R530 and R535 has unknown impact and remote attack vectors, related to an "Integrity Problem" involving LIC-TCPIP and TCP reset. NOTE: it is possible that this issue is related to...Show more Unspecified vulnerability in IBM OS/400 R530 and R535 has unknown impact and remote attack vectors, related to an "Integrity Problem" involving LIC-TCPIP and TCP reset. NOTE: it is possible that this issue is related to CVE-2004-0230, but this is not certain.Show less
CVE-2006-6836 1Ibm 1Os 400 Apr 23, 2026 Dec 31, 2006 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple unspecified vulnerabilities in osp-cert in IBM OS/400 V5R3M0 have unspecified impact and attack vectors, related to ASN.1 parsing.
CVE-2005-1182 1Ibm 1Os 400 Apr 16, 2026 May 2, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Unknown vulnerability in Incoming Remote Command (iSeries Access for Windows Remote Command service) in IBM OS/400 R510, R520, and R530 allows attackers to cause a denial of service (IRC shutdown) via certain inputs.
CVE-2005-0899 1Ibm 1Os 400 Apr 16, 2026 May 2, 2005 N/A· v4 N/A· v3 2.1 LOW· v2 AS/400 running OS400 5.2 installs and enables LDAP by default, which allows remote authenticated users to obtain OS/400 user profiles by performing a search.
CVE-2002-1731 1Ibm 1Os 400 Apr 16, 2026 Dec 31, 2002 N/A· v4 N/A· v3 2.1 LOW· v2 The System Request menu in IBM AS/400 allows local users to list valid user accounts by viewing the object names that are type USRPRF.