OS/400 User Account Name Disclosure Vulnerability

The following directions have been provided by "'ken'@FTU" <ken_at_ftu@yahoo.com>:

Sign-on to AS/400
Issue system request (Shift + Esc key)
Hit enter
Choose option 3, display current job
Choose option 13, display library list
Choose option 5 next to library QSYS
Scroll down to view names of all objects of type *USRPRF (user profile)


 

Privacy Statement
Copyright 2010, SecurityFocus