Cross-Site Scripting Vulnerability in Hitachi Web Server Status Information Display Function

Overview A cross-site scripting vulnerability has been found with the Status Information Display function of Hitachi Web Server. Impact An attacker could execute a cross-site scripting attack by sending a request that contains malicious scripts. The vulnerability does not affect the products if t...

Hitachi Groupmax Collaboration Products Cross-Site Scripting Vulnerability

Overview A cross-site scripting vulnerability has been found in the Hitachi Groupmax Collaboration products. Impact A remote attacker could execute arbitrary scripts. Solution Please refer to the 'Vendor Information' section for official countermesure and take appropriate action...

JP1 Request Handling Denial of Service Vulnerabilities

Overview Hitachi JP1 products fails to handle unexpected requests and data, which could be exploited to cause a denial of service condition. Impact An attacker could cause a Denial of Service DoS. Solution Please refer to the 'Vendor Information' section for official remediation and take...

Hitachi Soumu Workflow Authentication Bypassing Vulnerability

Overview Hitachi Soumu Workflow template files contain vulnerabilities that could be exploited to bypass authentication mechanisms. Impact An attacker could access a web page bypassing authentication. Solution Please refer to the 'Vendor Information' section for official remediation and take...

Hitachi Web Server SSL Client Authentication Vulnerability

Overview Hitachi Web Server accepts an SSL certificate sent by a clinet trying to connect to the Server even if the certificate is fraudulent. The vulnerability does not affect the product if the SSL authenticaton client feature is disabled. Impact An attacker could gain access with a fraudulent...

Hitachi JP1/File Transmission Server/FTP Denial of Service Vulnerability

Overview Hitachi JP1/File Transmission Server/FTP does not handle certain FTP command arguments properly, which could trigger Denial of Service DoS incidents. Impact An attacker could cause a Denial of Service DoS condition using the FTP commands with certain file names. Solution Please refer to...

Hitachi Web Server Cross-Site Scripting Vulnerability with Server-Status Page

Overview When Hitachi Web Server receives a request that contains malicious scripts, they are inserted into the server-satus page the Server automatically creates. This allows the inserted malicious scripts to be executed on the client machines. The vulnerability does not affect the product if th...

JP1/Cm2/Network Node Manager vulnerable to cross-site scripting

Overview Hitachi JP1/Cm2/Network Node Manager NNM is vulnerable to cross-site scripting. Hitachi JP1/Cm2/Network Node Manager NNM is software that helps a network administrator manage network configurations, faults, and other elements. Hitachi NNM is vulnerable to cross-site scripting. Impact An...

Hitachi JP1/File Transmission Server/FTP Authentication Bypass Vulnerability

Overview Hitachi JP1/File Transmission Server/FTP contains a vulnerability which could be exploited to bypass authentication. Impact An attacker could view the files in a certain directory. Solution Please refer to the 'Vendor Information' section for official remediation and take appropriate...

CVE-2008-2172

Unspecified vulnerability in Hitachi GR routers allows remote attackers to cause a denial of service dropped session via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372...

Design/Logic Flaw

Unspecified vulnerability in Hitachi GR routers allows remote attackers to cause a denial of service dropped session via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372...

CVE-2008-2172

Technical details about this CVE are not publicly provided in the supplied documents. Monitor for updates.

CVE-2008-2172

Unspecified vulnerability in Hitachi GR routers allows remote attackers to cause a denial of service dropped session via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372...

BGP implementations do not properly handle UPDATE messages

Overview BGP implementations from multiple vendors including Juniper may not properly handle specially crafted BGP UPDATE messages. These vulnerabilities could allow an unauthenticated, remote attacker to cause a denial of service. Disrupting BGP communication could lead to routing instability...

Hitachi SEWB/PLATFORM SEWB3远程拒绝服务漏洞

BUGTRAQ ID: 27900 CNCAN ID:CNCAN-2008022204 Hitachi SEWB/PLATFORM SEWB3存在未明安全问题。 当SEWB3从其他非SEWB进程接收到非法数据时，SEWB3消息服务会挂起或崩溃。 如果你系统设置作为服务器-客户端系统，此问题会发生，服务器和客户端消息服务全受影响。 Hitachi SEWB3/PLATFORM 02-14-/A Solaris Hitachi SEWB3/PLATFORM 02-13 AIX Hitachi SEWB3/PLATFORM 01-17-/F HP-UX11.x Hitachi...

CVE-2008-0875

Unspecified vulnerability in Hitachi EUR Print Manager, and related Client and Local Server products, 05-06 through 05-06-/B and 05-08 allows remote attackers to cause a denial of service service hang or termination via unspecified vectors related to "unexpected data."...

CVE-2008-0876

Unspecified vulnerability in the SEWB3 messaging service in Hitachi SEWB3/PLATFORM and SEWB3/MI-PLATFORM 01-00 through 02-14-/A allows remote attackers to cause a denial of service service outage via "invalid data."...

Design/Logic Flaw

Unspecified vulnerability in Hitachi EUR Print Manager, and related Client and Local Server products, 05-06 through 05-06-/B and 05-08 allows remote attackers to cause a denial of service service hang or termination via unspecified vectors related to "unexpected data."...

CVE-2008-0876

CVE-2008-0876 affects Hitachi SEWB3/PLATFORM and SEWB3/MI-PLATFORM (versions 01-00 through 02-14-/A). The SEWB3 messaging service mishandles malformed data received over the network, enabling a remote attacker to trigger a Denial of Service (service outage). The connected JVN entry explicitly des...

CVE-2008-0875

The CVE-2008-0875 issue affects Hitachi EUR Print Manager and related Client/Local Server products (versions 05-06 through 05-06-/B and 05-08). The underlying cause is unspecified data handling that can be exploited remotely to trigger a Denial of Service (service hang or termination). Documented...