Security Information 2009

Security Advisories and Alerts

December 22, 2009

• The StartTLS function is not enabled in Hitachi Storage Command Suite products

December 22, 2009

• Buffer overflow vulnerability in Cosminexus, Processing Kit for XML, and Hitachi Developer's Kit for Java

November 4, 2009

• DoS Vulnerability in Cosminexus XML Processor

November 4, 2009

• Buffer overflow vulnerability in Cosminexus, Processing Kit for XML, and Hitachi Developer's Kit for Java

November 4, 2009

• Problem where access rights become invalid in Hitachi Device Manager server IPv6 environments

November 4, 2009

• Vulnerability in reading arbitrary memory locations by using a parsing zip file API in Cosminexus, Processing Kit for XML, Hitachi Developer's Kit for Java

November 4, 2009

• Vulnerability in the UTF-8 decode function in Cosminexus, Processing Kit for XML, and Hitachi Developer's Kit for Java

September 9, 2009

• Problem where JP1/Automatic Job Management System 2 - View, JP1/Integrated Management - View, and JP1/Cm2/SNMP System Observer abnormally terminate when an invalid GIF file is displayed

September 9, 2009

• Multiple vulnerabilities in JP1/File Transmission Server/FTP

September 9, 2009

• Buffer overflow vulnerability in Cosminexus, Processing Kit for XML, and Hitachi Developer's Kit for Java

September 9, 2009

• Problem where access rights become invalid in Hitachi Device Manager server IPv6 environments

September 9, 2009

• Problem where access rights become invalid in Groupmax Scheduler Server

September 9, 2009

• DoS Vulnerability in Hitachi Web Server reverse proxy function

July 24, 2009

• ross-site Scripting Vulnerability in Hitachi Business Logic - Container and Hitachi Business Logic - Container 2

July 24, 2009

• Vulnerability in the Hitachi Web Server Function for Authenticating SSL Clients　

July 24, 2009

• DoS Vulnerability in Hitachi Web Server reverse proxy function　

July 24, 2009

• Vulnerability in reading arbitrary memory locations by using a parsing zip file API in Cosminexus, Processing Kit for XML, Hitachi Developer's Kit for Java 　

July 24, 2009

• Vulnerability in the UTF-8 decode function in Cosminexus, Processing Kit for XML, and Hitachi Developer's Kit for Java 　

June 4, 2009

• Vulnerability in Elevating Privileges for the JP1/VERITAS NetBackup Communications Setup s

June 4, 2009

• Cross-site Scripting Vulnerability When Using the Status Information Display Function in Hitachi Web Server

June 4, 2009

• Cross-Site Scripting Vulnerability in the Hitachi Web Server Error Page

June 4, 2009

• Cross-Site Scripting Vulnerability in the Hitachi Web Server Imagemap Function

June 4, 2009

• Vulnerability When Using a Reverse Proxy Function of Hitachi Web Server

June 4, 2009

• Cross-Site Scripting Vulnerability in Hitachi Web Server Function for Creating Server-Status Pages

June 4, 2009

• Vulnerability in Hitachi Web Server Function for Authenticating SSL Clients