CVE-2005-1242: Directory traversal vulnerability in the third party tool from Bsafe, as used to secure the iSeries AS/400...

Security readout for executives and security teams

This CVE describes a directory traversal flaw in a Bsafe third-party tool used to secure iSeries AS/400 FTP servers. A remote attacker could request files outside the intended FTP area and potentially access sensitive system files, including qsys.lib. The source bundle does not identify fixed versions or active exploitation. Exposure is most likely in legacy iSeries or AS/400 environments using the referenced Bsafe third-party FTP security tool. The bundle does not provide enough product metadata to identify exact affected versions or CPEs. Prioritize if the organization still operates internet-accessible or partner-accessible AS/400 FTP services. The business risk is unauthorized file access on legacy systems that may hold critical operational data, but exact exposure depends on whether the named Bsafe tool is present. Mitigation focus: Inventory iSeries or AS/400 FTP security products for any Bsafe third-party tool use.; Check Bsafe or current maintainer guidance for fixed versions or supported configuration changes.; Restrict FTP exposure to trusted networks where business use still requires it..

Prepared

Jun 29, 2026, 22:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.