Secunia Logo  
 
Hitachi Multiple JP1 Products Denial of Service
Secunia Advisory: SA19841
Release Date: 2006-04-26
Last Update: 2006-04-28
Popularity: 5,500 views

Critical:
Moderately critical
Impact: DoS
Where: From remote
Solution Status: Vendor Patch

Software:Hitachi JP1/Automatic Job Management System 2 (AJS2)
Hitachi JP1/Cm2/Network Node Manager
Hitachi JP1/File Access Control
Hitachi JP1/Performance Management (PFM)
Hitachi JP1/PFM/SNMP System Observer (SSO)
Hitachi JP1/Security Integrated Manager
Hitachi JP1/Server Conductor/Blade Server Manager
Hitachi JP1/Server Conductor/Server Manager

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2006-2068


Description:
A vulnerability has been reported in multiple JP1 products, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error when handling certain specially crafted data or requests. This can be exploited to cause the products to stop responding.

The vulnerability has been reported in the following products:
* JP1/PFM/SNMP System Observer
* JP1/Server System Observer
* JP1/Automatic Job Management System 2
* JP1/Performance Management
* Cm2/Network Node Manager Enterprise/Unlimited/250,
* JP1/Cm2/Network Node Manager Enterprise/250
* JP1/Server Conductor/Blade Server Manager
* JP1/Server Conductor/Server Manager
* Server Conductor/Blade Server Manager
* Server Conductor/Server Manager
* System Manager - Management Console
* JP1/File Access Control
* JP1/Security Integrated Manager

Solution:
Apply patches (see patch matrix in the vendor advisory).

Provided and/or discovered by:
Reported by the vendor.

Changelog:
2006-04-28: Added CVE reference.

Original Advisory:
http://www.hitachi-support.com/security_e/vuls_e/HS06-007_e/index-e.html


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. OpenSSL DSA / ECDSA "EVP_VerifyFinal()" Spoofing Vulnerability // 69 views
2. Joomla! "X_CMS_LIBRARY_PATH" Directory Traversal Vulnerability // 38 views
3. SAP GUI TabOne ActiveX Control Caption List Buffer Overflow // 36 views
4. Symantec Mail Security for SMTP Response Handling Denial of Service // 36 views
5. Red Hat update for openssl // 26 views
6. ComponentOne SizerOne CTab ActiveX Control Caption List Buffer Overflow // 25 views
7. TSC2 Help Desk CTab ActiveX Control Caption List Buffer Overflow // 25 views
8. Red Hat update for dbus // 24 views
9. Red Hat update for xterm // 24 views
10. vBulletin Personal Sticky Threads Add-on Security Bypass Vulnerability // 24 views