CVE-2005-1238: IBM Iseries As 400

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

By design, the built-in FTP server for iSeries AS/400 systems does not support a restricted document root, which allows attackers to read or write arbitrary files, including sensitive QSYS databases, via a full pathname in a GET or PUT request.

Affected products

• IBM Iseries As 400: any version

Published 2005-05-02. Last modified 2026-06-16.