CVE-2005-1244: Netiq Pssecure

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the third party tool from NetIQ, as used to secure the iSeries AS/400 FTP server, allows remote attackers to access arbitrary files, including those from qsys.lib, via ".." sequences in a GET request. NOTE: the vendor has disputed this issue, saying that "neither NetIQ Security Manager nor our iSeries Security Solutions are vulnerable.

Affected products

• Netiq Pssecure: version 7.5 only

Published 2005-04-20. Last modified 2026-06-16.