|
Hitachi Products MDAC RDS.Dataspace ActiveX Vulnerability
|
|
Secunia Advisory:
|
SA20719
|
|
|
Release Date:
|
2006-06-20
|
|
Popularity:
|
5,026 views
|
|
|
Critical:
|
Highly critical
|
|
Impact:
|
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | Hitachi DABroker 1.x
Hitachi DBPARTNER 1.x
Hitachi DBPARTNER2 1.x
Hitachi HITSENSER5 1.x
Hitachi HITSENSER5 2.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2006-0003
|
|
Description:
Hitachi has acknowledged a vulnerability in various products, which can be exploited by malicious people to compromise a vulnerable system.
For more information:
SA19583
Successful exploitation requires that MDAC 2.5 has been installed with the products. This is not default for certain products.
The vulnerability has been reported in the following products:
* DBPARTNER ODBC Driver version 01-06 through 01-11.
* DBPARTNER ODBC 3.0 Driver version 01-00 through 01-03.
* DABroker for ODBC version 01-00 through 01-02.
* DBPARTNER2 Client version 01-05 through 01-12.
* DBPARTNER2 COBOL Components version 01-00 through 01-00-/A.
* DBPARTNER2 Multiuser Option version 01-00 through 01-01.
* DBPARTNER2 Client for Jichitai version 01-00.
* HITSENSER5 Professional for Cosmicube version 01-00 through 02-80.
* HITSENSER5 Standard for Cosmicube version 01-00 through 02-80.
* HITSENSER5 Professional for RDB version 01-10 through 02-80.
* HITSENSER5 Standard for RDB version 01-10 through 02-80.
* HITSENSER5 Professional version 01-10 through 02-80.
* HITSENSER5 Standard version 01-10 through 02-80.
* HITSENSER5 Web CPU license version 01-10 through 02-80.
* HITSENSER5 Web connection license
Solution:
The vendor recommends applying patches from Microsoft (see Secunia Advisory link).
Original Advisory:
http://www.hitachi-support.com/security_e/vuls_e/HS06-013_e/index-e.html
Other References:
SA19583:
http://secunia.com/advisories/19583/
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
