CVE:CVE-2005-0868
CNNVD:CNNVD-200505-460
AS/400 Telnet 5250终端仿真客户端，当通过(1)IBM client access，(2) Bosanova，(3)PowerTerm，(4)Mochasoft或者其他的仿真软件部署时，允许恶意的AS/400服务器通过后跟STRPCCMD(Start PC command)的STRPCO(Start PC Organizer)命令来执行任意命令，例如通过使用REXEC来创建后门帐户可以触发此漏洞。
solution:Upgrade bosanova launcher400 to a higher version than *; Upgrade ibm client_access to a higher version than *; Upgrade mochasoft tn5250 to a higher version than *; Upgrade powerterm interconnect to a higher version than *