CVE-2005-1240: Castlehill Secure Net

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the third party tool from Castlehill, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request.

Affected products

• Castlehill Secure Net: any version

Published 2005-04-20. Last modified 2026-06-16.