CVE-2005-1239: Directory traversal vulnerability in the third party tool from Raz-Lee, as used to secure the iSeries AS/40...

Security readout for executives and security teams

CVE-2005-1239 describes a path traversal issue in a Raz-Lee third-party FTP security tool for IBM iSeries AS/400 environments. A remote attacker could use traversal sequences in FTP file requests to reach files outside intended boundaries, including qsys.lib. The public record does not identify affected versions or a confirmed fix. Exposure is most likely in legacy IBM iSeries/AS/400 FTP deployments that used Raz-Lee’s third-party FTP security tooling around 2005. Current exposure cannot be determined from the bundle because affected products and versions are listed as n/a. Treat this as a legacy exposure question, not a confirmed current emergency. If the organization still runs AS/400 FTP with old third-party security controls, prioritize inventory, vendor confirmation, and access restriction. Mitigation focus: Inventory IBM iSeries/AS/400 FTP servers and related Raz-Lee security tooling.; Check Raz-Lee or IBM guidance for affected versions, patches, or replacement recommendations.; Restrict FTP access to trusted networks and authenticated business users only..

Prepared

Jun 29, 2026, 22:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.