CVSS: 7.8EPSS: 5%CPEs: 8EXPL: 0CVE-2007-3537
https://notcve.org/view.php?id=CVE-2007-3537
IBM OS/400 (aka i5/OS) V4R2M0 through V5R3M0 on iSeries machines sends responses to TCP SYN-FIN packets, which allows remote attackers to obtain system information and possibly bypass firewall rules. IBM OS/400 (también conocido como i5/OS) V4R2M0 hasta V5R3M0 en máquinas iSeries envía respuestas a paquetes TCP SYN-FIN, lo cual permite a atacantes remotos obtener información sensible y posiblemente evitar reglas de cortafuegos. • http://osvdb.org/37792 http://secunia.com/advisories/25885 http://www-1.ibm.com/support/docview.wss?uid=nas2742405285431729b86256e620067dc17 http://www.securityfocus.com/bid/24706 https://exchange.xforce.ibmcloud.com/vulnerabilities/35173 •
CVSS: 2.1EPSS: 0%CPEs: 5EXPL: 2CVE-2002-1731 – OS/400 - User Account Name Disclosure
https://notcve.org/view.php?id=CVE-2002-1731
The System Request menu in IBM AS/400 allows local users to list valid user accounts by viewing the object names that are type USRPRF. • https://www.exploit-db.com/exploits/21283 http://securitytracker.com/id?1003507 http://www.securityfocus.com/bid/4059 https://exchange.xforce.ibmcloud.com/vulnerabilities/8179 •