[SA17635] Hitachi Groupmax Mail Denial of Service Vulnerability

TITLE: Hitachi Groupmax Mail Denial of Service Vulnerability SECUNIA ADVISORY ID: SA17635 VERIFY ADVISORY: http://secunia.com/advisories/17635/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Groupmax Mail 7.x http://secunia.com/product/6160/ Groupmax Mail 6.x...

Multiple Hitachi Wi-Fi VoIP phones vulnerabilities

Information leak, SNMP access, built-in hardware password, unauthenticated Web access TCP/8080 and shell access TCP/3390...

[Full-disclosure] Hitachi IP5000 VoIP Wifi phone multiple vulnerabilities

I disclosed today the following vulnerabilities at the 32nd CSI conference in Washington, D.C. https://www.cmpevents.com/CSI32/a.asp?option=G&V=3&id=406438 Thanks, Shawn Merdinger =============================================================== VENDOR: Hitachi PRODUCT: Hitachi IP5000 VOIP WIFI Pho...

CVE-2004-2498

Unspecified vulnerability in the error handler in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01 and earlier, when using the default error template and debug mode is set to ON, allows remote attackers to determine internal directory structures via unknown attack vectors...

CVE-2004-2497

Cross-site scripting XSS vulnerability in the error handler in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01 and earlier, when using the default error template and debug mode is set to ON, allows remote attackers to inject arbitrary web script or HTML via unknown attack vector...

CVE-2004-2499

Unspecified vulnerability in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01 and earlier allows remote attackers to cause a denial of service via unknown attack vectors when a web site is "improperly accessed."...

CVE-2004-2497

The CVE-2004-2497 entry describes an XSS in the error handler of Hitachi Web Page Generator and Web Page Generator Enterprise (version 4.01 and earlier) when using the default error template with debug mode ON. This allows remote attackers to inject arbitrary script/HTML via unknown attack vector...

CVE-2004-2499

Technical details for CVE-2004-2499 are not publicly available in the provided documents. Monitor for updates.

CVE-2004-2498

Technical details (affected product, exact vulnerability, impact, and fix) are not publicly available in the provided documents. Monitor for updates.

Hitachi TP1 DoS

No description provided...

[SA17185] Hitachi TP1/Server Base Unspecified Denial of Service Vulnerability

TITLE: Hitachi TP1/Server Base Unspecified Denial of Service Vulnerability SECUNIA ADVISORY ID: SA17185 VERIFY ADVISORY: http://secunia.com/advisories/17185/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Hitachi TP1/Server Base http://secunia.com/product/5853/ DESCRIPTION...

CVE-2005-3164

The AJP connector in Apache Tomcat 4.0.1 through 4.0.6 and 4.1.0 through 4.1.36, as used in Hitachi Cosminexus Application Server and standalone, does not properly handle when a connection is broken before request body data is sent in a POST request, which can lead to an information leak when...

Hitachi Cosminexus logical bug

For HTTP POST request with empty body data from previous POST request is used...

[SA17019] Hitachi Cosminexus Request Body Disclosure of Personal Information

TITLE: Hitachi Cosminexus Request Body Disclosure of Personal Information SECUNIA ADVISORY ID: SA17019 VERIFY ADVISORY: http://secunia.com/advisories/17019/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Cosminexus 6.x...

CVE-2004-2452

Unknown vulnerability in Hitachi Cosminexus Portal Framework 01-00, 01-01, 01-02, 02-01, 02-02, 02-03, and other versions allows remote attackers to obtain sensitive information in the tag library...

CVE-2004-2452

Technical details for CVE-2004-2452 are not publicly provided in the supplied documents; no concrete exploit, affected versions, or remediation are detailed here. Monitor for updates.

CVE-2004-2420

Hitachi JP1/File Transmission Server/FTP 6 and 7 (JP1) is affected. A remote attacker can trigger a denial of service (daemon halt) by sending a port scan that includes reset packets. The CVE entry describes the exposure but does not provide exploit code or in-the-wild details in the connected do...

CVE-2004-2421

Unknown vulnerability in Hitachi Job Management Partner JP1 JP1/File Transmission Server/FTP 6 and 7, when running on HP-UX in trusted mode, allows attackers to bypass authentication and gain administrator rights...

CVE-2004-2420

Hitachi Job Management Partner JP1 JP1/File Transmission Server/FTP 6 and 7 allows remote attackers to cause a denial of service daemon halt via a port scan involving reset packets...

CVE-2004-2421

CVE-2004-2421 affects Hitachi JP1/File Transmission Server/FTP 6 and 7 running on HP-UX in trusted mode. The description states an authentication bypass that could grant administrator rights, but the provided documents do not include concrete technical details, affected versions beyond JP1/FTP 6 ...