IBM OS 400 vulnerabilities

8 CVEs affecting IBM OS 400, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-2709, published 2008-06-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2006-6836, published 2006-12-31. High severity, CVSS 10.0. EPSS: 1.6% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in osp-cert in IBM OS/400 V5R3M0 have unspecified impact and attack vectors, related to ASN.1 parsing.
CVE-2007-3537, published 2007-07-03. High severity, CVSS 7.8. EPSS: 1.5% chance of exploitation in the next 30 days. IBM OS/400 (aka i5/OS) V4R2M0 through V5R3M0 on iSeries machines sends responses to TCP SYN-FIN packets, which allows remote attackers to obtain system information and possibly bypass firewall rules.
CVE-2005-1182, published 2005-05-02. Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days. Unknown vulnerability in Incoming Remote Command (iSeries Access for Windows Remote Command service) in IBM OS/400 R510, R520, and R530 allows attackers to cause a denial of service (IRC shutdown)…
CVE-2007-0442, published 2007-01-23. Medium severity, CVSS 5.0. EPSS: 1.1% chance of exploitation in the next 30 days. Unspecified vulnerability in IBM OS/400 R530 and R535 has unknown impact and remote attack vectors, related to an "Integrity Problem" involving LIC-TCPIP and TCP reset. NOTE: it is possible that…
CVE-2008-0694, published 2008-02-12. Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the HTTP Server in IBM OS/400 V5R3M0 and V5R4M0 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header.
CVE-2002-1731, published 2002-12-31. Low severity, CVSS 2.1. EPSS: 0.8% chance of exploitation in the next 30 days. The System Request menu in IBM AS/400 allows local users to list valid user accounts by viewing the object names that are type USRPRF.
CVE-2005-0899, published 2005-05-02. Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days. AS/400 running OS400 5.2 installs and enables LDAP by default, which allows remote authenticated users to obtain OS/400 user profiles by performing a search.
CVE-2008-2709, published 2008-06-16. Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days. Buffer overflow in the BrSmRcvAndCheck function in the RCHMGR module on IBM OS/400 V5R4M0, V5R4M5, and V6R1M0 allows local users to cause a denial of service (task halt and main storage dump) via…