Hitachi JP1/HiCommand Unspecified Information Disclosure Vulnerability - Advisories

Software Inspectors

	Scan Online

	Personal (PSI)

	Network (NSI 2.0)

Solutions For

	Security Professionals

	Security Vendors

Free Solutions For

	Open Communities

	Journalists & Media

Secunia Advisories

	Search

	Historic Advisories

	Listed By Product

	Listed By Vendor

	Statistics / Graphs

	Secunia Research

	Report Vulnerability

	About Advisories

Virus Information

	Chronological List

	Last 10 Virus Alerts

	About Virus Information

Secunia Customers

	Customer Area

Hitachi JP1/HiCommand Unspecified Information Disclosure Vulnerability

Secunia Advisory:	SA24684
Release Date:	2007-03-30
Last Update:	2007-04-12

Critical:	Less critical
Impact:	Exposure of system information Exposure of sensitive information
Where:	Local system
Solution Status:	Vendor Patch

Software:	Hitachi JP1/HiCommand DeviceManager Hitachi JP1/HiCommand Global Link Availability Manager Hitachi JP1/HiCommand Replication Monitor Hitachi JP1/HiCommand Tiered Storage Manager Hitachi JP1/HiCommand Tuning Manager

CVE reference:	CVE-2007-1853 (Secunia mirror)

	Want to know the next time vulnerabilities are fixed in this product? - Companies can be alerted via email and SMS!

Description: A vulnerability has been reported in Hitachi JP1/HiCommand products, which can be exploited by malicious, local users to disclose certain sensitive information. The vulnerability is caused due to an unspecified error and can be exploited to gain knowledge of other users' authentication information. The vulnerability is reported in the following products: * JP1/HiCommand DeviceManager * JP1/HiCommand Global Link Availability Manager * JP1/HiCommand Replication Monitor * JP1/HiCommand Tiered Storage Manager * JP1/HiCommand Tuning Manager Solution: Please see the vendor's advisory for fix details. Provided and/or discovered by: Reported by the vendor. Changelog: 2007-04-12: Added CVE reference. Original Advisory: Hitachi: http://www.hitachi-support.com/security_e/vuls_e/HS07-007_e/index-e.html



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

1 Related Secunia Security Advisories

1. Hitachi JP1/HiCommand Series Two Vulnerabilities

Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Subdreamer Light Global Variables SQL Injection Vulnerability

2.	dotProject SQL Injection and Cross-Site Scripting

3.	HP TCP/IP Services for OpenVMS Finger Format String Vulnerability

4.	Sun Solaris Kernel Covert Channel Security Bypass

5.	Novell eDirectory Multiple Vulnerabilities

6.	Adium MSN SLP Message Integer Overflow Vulnerabilities

7.	PluggedOut Blog "index.php" SQL Injection Vulnerabilities

8.	Slackware update for amarok

9.	Caudium "configvar" Insecure Temporary Files

10.	Blogn Cross-Site Scripting and Cross-Site Request Forgery