NetSight
low2.1Public exploit code

CVE-2002-1731

The System Request menu in IBM AS/400 allows local users to list valid user accounts by viewing the object names that are type USRPRF.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The System Request menu in IBM AS/400 allows local users to list valid user accounts by viewing the object names that are type USRPRF.

Affected products

VendorProductAffected versions
IbmOs 400
Versions v4r2, v4r3, v4r4, v4r5, v5r1

References