Security Information 2007

Security Advisories and Alerts

December 30, 2007

• Cross-Site Scripting Vulnerability When Using the DirectoryIndex function in Hitachi Web Server

November 30, 2007

• Cross-Site Scripting Vulnerability in JP1/Cm2/Network Node Manager

November 30, 2007

• Vulnerability When Using a Reverse Proxy Function of Hitachi Web Server

November 25, 2007

• Code Execution Vulnerability in JP1/Cm2/Network Node Manager

November 22, 2007

• DoS Vulnerability in JP1/File Transmission Server/FTP

November 22, 2007

• Authentication Bypass Vulnerability in JP1/File Transmission Server/FTP

October 31, 2007

• Unintended Display of Information when Using Groupmax Collaboration - Schedule

October 31, 2007

• Cross-Site Scripting Vulnerability in Hitachi Web Server Function for Creating Server-Status Pages

October 31, 2007

• Vulnerability in Hitachi Web Server Function for Authenticating SSL Clients

October 5, 2007

• Cosminexus Agent Process Goes Down

October 5, 2007

• Abnormal Termination of TSC Domain Manager in TPBroker

October 5, 2007

• DoS Vulnerability in Cosminexus

September 7, 2007

• Authentication Bypass Vulnerabilities in Soumu Workflow Series Products

August 31, 2007

• DoS Vulnerability Caused by a Heap Overflow in the RPC Interface of JP1/VERITAS Backup Exec for Windows Servers

August 24, 2007

• DoS Vulnerability in DABroker

August 24, 2007

• SQL Injection Vulnerability of JP1/NETM/DM Manager

July 31, 2007

• Problem of Overwriting Schedule Server Configuration Data with Previous Values when Using the Groupmax Scheduler_Facilities Management Tool

July 31, 2007

• Problem of Assigning Schedule Data to an Unintended Member when Using Groupmax Collaboration - Schedule

July 31, 2007

• A Vulnerability in the Web-based Interface for JP1/Cm2/Hierarchical Viewer

July 13, 2007

• DoS Vulnerability of TP1/Server Base

July 13, 2007

• DoS Vulnerability in XP/W

July 6, 2007

• Cross-site Scripting Vulnerability of JP1/HiCommand Series Products

July 6, 2007

• Protocol-version Rollback Vulnerability in OpenSSL of JP1/HiCommand Series Products

July 6, 2007

• Problem of the TPBroker ADM Daemon Process Going Down

July 6, 2007

• Vulnerabilities of BrightStor ARCserve Backup (Security Update 6 Mediasvr)

June 1, 2007

• DoS Vulnerability in TP1/NET/OSI-TP-Extended

June 1, 2007

• Cross-site Scripting Vulnerability in Groupmax Collaboration Portal and uCosminexus Collaboration Portal

June 1, 2007

• Multiple Vulnerabilities in SSL/TLS Implementations

May 24, 2007

• Vulnerability of BrightStor ARCserve Backup (Buffer Overflow of Tape Engine)

April 27, 2007

• Vulnerabilities of BrightStor ARCserve Backup(Tape Engine and Portmapper)

April 27, 2007

• Buffer Overflow Vulnerability of Groupmax Mobile Option for Mobile-Phone

April 12, 2007

• Problems with Log Operation of JP1/HIBUN

April 12, 2007

• Vulnerabilities of JP1/HIBUN Advanced Edition Management Server and Log Server

April 12, 2007

• Vulnerability to miscontrol of PCMCIA devices by JP1/HIBUN

April 12, 2007

• Vulnerability to user privilege violations when using the view function in JP1/HIBUN

April 6, 2007

• Information Exposure Vulnerability of JP1/HiCommand Series Products

April 6, 2007

• Problem with Session Information Processing of uCosminexus Application Server

March 30, 2007

• SQL Injection Vulnerability of Groupmax Collaboration Portal, uCosminexus Collaboration Portal, and uCosminexus Content Manager

March 30, 2007

• DoS Vulnerability in HiRDB Datareplicator

February 23, 2007

• Vulnerability of the Responder Control Processing of OSAS/FT/W

February 23, 2007

• Multiple Vulnerabilities of JP1/VERITAS NetBackup

February 23, 2007

• Multiple Vulnerabilities of JP1/Cm2/Network Node Manager

February 23, 2007

• Vulnerability of BrightStor ARCserve Backup (Buffer Overflow of Discovery Service)

January 24, 2007

• Multiple Vulnerabilities of Hitachi Web Server

January 24, 2007

• Problem of an OpenTP1 System Server or User Server Going Down