Secunia

Description

Hitachi has acknowledged a vulnerability in various products, which can be exploited by malicious people to compromise a vulnerable system.

For more information:
SA19583

Successful exploitation requires that MDAC 2.5 has been installed with the products. This is not default for certain products.

The vulnerability has been reported in the following products:
* DBPARTNER ODBC Driver version 01-06 through 01-11.
* DBPARTNER ODBC 3.0 Driver version 01-00 through 01-03.
* DABroker for ODBC version 01-00 through 01-02.
* DBPARTNER2 Client version 01-05 through 01-12.
* DBPARTNER2 COBOL Components version 01-00 through 01-00-/A.
* DBPARTNER2 Multiuser Option version 01-00 through 01-01.
* DBPARTNER2 Client for Jichitai version 01-00.
* HITSENSER5 Professional for Cosmicube version 01-00 through 02-80.
* HITSENSER5 Standard for Cosmicube version 01-00 through 02-80.
* HITSENSER5 Professional for RDB version 01-10 through 02-80.
* HITSENSER5 Standard for RDB version 01-10 through 02-80.
* HITSENSER5 Professional version 01-10 through 02-80.
* HITSENSER5 Standard version 01-10 through 02-80.
* HITSENSER5 Web CPU license version 01-10 through 02-80.
* HITSENSER5 Web connection license

Solution
The vendor recommends applying patches from Microsoft (see Secunia Advisory link).
Further details available in Customer Area

Original Advisory
http://www.hitachi-support.com/security_e/vuls_e/HS06-013_e/index-e.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area