HITACHI : Hitachi Incident Response Team

[Vulnerability Information]
September 29, 2008:	Buffer Overflow Vulnerability in Cosminexus
July 11, 2008:	Cross-site Scripting Vulnerability When Using the Status Information Display Function in Hitachi Web Server
July 11, 2008:	Cross-site Scripting Vulnerability in Collaboration - Online Community Management
July 11, 2008:	Vulnerability in the Sample Code for uCosminexus Portal Framework
July 11, 2008:	Cross-site Scripting Vulnerability in Cosminexus Component Container
May 30, 2008:	Cross-site Scripting Vulnerability in Groupmax Collaboration
May 30, 2008:	DoS Vulnerability in XMAP3
May 23, 2008:	Cross-site Scripting Vulnerability in Groupmax World Wide Web Desktop/BUNSHOKANRI
May 23, 2008:	Multiple Vulnerabilities in the JP1/Cm2/Network Node Manager Web Coordinated Function
May 23, 2008:	Multiple Vulnerabilities in the JP1/VERITAS Backup Exec for Windows Servers Scheduler Function
May 23, 2008:	DoS Vulnerability in JP1/Cm2/Network Node Manager
May 23, 2008:	Problem in JP1/HIBUN Encryption, Decryption, and Data Reproduction Functionality
May 23, 2008:	Cross-Site Scripting Vulnerability in the Hitachi Web Server Error Page
May 23, 2008:	HTTP Request Smuggling Vulnerability in Cosminexus Component Container
April 4, 2008:	Code Execution Vulnerability in JP1/Cm2/Network Node Manager
February 27, 2008:	Cross-Site Scripting Vulnerability in the Hitachi Web Server Imagemap Function
February 27, 2008:	Problem about Handling Session Data when Using the Session Failover Function in uCosminexus Application Server
February 20, 2008:	Denial of Service Vulnerability in SEWB3/PLATFORM
February 20, 2008:	Denial of Service Vulnerability in EUR Print Manager
February 4, 2008:	Vulnerability of BrightStor ARCserve Backup
February 4, 2008:	Multiple DoS Vulnerability in the Job Engine of JP1/VERITAS Backup Exec for Windows Servers
February 4, 2008:	Vulnerability of DoS in JP1 Products
February 4, 2008:	Buffer Overflow Vulnerability of Cosminexus, Processing Kit for XML, and Hitachi Developer's Kit for Java(TM)
February 4, 2008:	Buffer Overflow and DoS Vulnerabilities in Cosminexus and Processing Kit for XML
February 4, 2008:	Cross-site Scripting Vulnerability When Using Cosminexus Javadoc Command
December 30, 2007:	Cross-Site Scripting Vulnerability When Using the DirectoryIndex function in Hitachi Web Server
November 30, 2007:	Cross-Site Scripting Vulnerability in JP1/Cm2/Network Node Manager
November 30, 2007:	Vulnerability When Using a Reverse Proxy Function of Hitachi Web Server
November 25, 2007:	Code Execution Vulnerability in JP1/Cm2/Network Node Manager
November 25, 2007:	Problem about Illegal Granting of Group Permissions in Cosminexus Application Server
November 22, 2007:	DoS Vulnerability in JP1/File Transmission Server/FTP
November 22, 2007:	Authentication Bypass Vulnerability in JP1/File Transmission Server/FTP
October 31, 2007:	Unintended Display of Information when Using Groupmax Collaboration - Schedule
October 31, 2007:	Cross-Site Scripting Vulnerability in Hitachi Web Server Function for Creating Server-Status Pages
October 31, 2007:	Vulnerability in Hitachi Web Server Function for Authenticating SSL Clients
October 5, 2007:	Cosminexus Agent Process Goes Down
October 5, 2007:	Abnormal Termination of TSC Domain Manager in TPBroker
October 5, 2007:	DoS Vulnerability in Cosminexus
September 7, 2007:	Authentication Bypass Vulnerabilities in Soumu Workflow Series Products
August 31, 2007:	DoS Vulnerability Caused by a Heap Overflow in the RPC Interface of JP1/VERITAS Backup Exec for Windows Servers
August 24, 2007:	DoS Vulnerability in DABroker
August 24, 2007:	SQL Injection Vulnerability of JP1/NETM/DM Manager
July 31, 2007:	Problem of Overwriting Schedule Server Configuration Data with Previous Values when Using the Groupmax Scheduler_Facilities Management Tool
July 31, 2007:	Problem of Assigning Schedule Data to an Unintended Member when Using Groupmax Collaboration - Schedule
July 31, 2007:	A Vulnerability in the Web-based Interface for JP1/Cm2/Hierarchical Viewer
July 13, 2007:	DoS Vulnerability of TP1/Server Base
July 13, 2007:	DoS Vulnerability in XP/W
July 6, 2007:	Cross-site Scripting Vulnerability of JP1/HiCommand Series Products
July 6, 2007:	Protocol-version Rollback Vulnerability in OpenSSL of JP1/HiCommand Series Products
July 6, 2007:	Problem of the TPBroker ADM Daemon Process Going Down
July 6, 2007:	Vulnerabilities of BrightStor ARCserve Backup (Security Update 6 Mediasvr)
June 1, 2007:	DoS Vulnerability in TP1/NET/OSI-TP-Extended
June 1, 2007:	Cross-site Scripting Vulnerability in Groupmax Collaboration Portal and uCosminexus Collaboration Portal
June 1, 2007:	Multiple Vulnerabilities in SSL/TLS Implementations
May 24, 2007:	Vulnerability of BrightStor ARCserve Backup (Buffer Overflow of Tape Engine)
April 27, 2007:	Vulnerabilities of BrightStor ARCserve Backup(Tape Engine and Portmapper)
April 27, 2007:	Buffer Overflow Vulnerability of Groupmax Mobile Option for Mobile-Phone
April 12, 2007:	Problems with Log Operation of JP1/HIBUN
April 12, 2007:	Vulnerabilities of JP1/HIBUN Advanced Edition Management Server and Log Server
April 12, 2007:	Vulnerability to miscontrol of PCMCIA devices by JP1/HIBUN
April 12, 2007:	Vulnerability to user privilege violations when using the view function in JP1/HIBUN
April 6, 2007:	Information Exposure Vulnerability of JP1/HiCommand Series Products
April 6, 2007:	Problem with Session Information Processing of uCosminexus Application Server
March 30, 2007:	SQL Injection Vulnerability of Groupmax Collaboration Portal, uCosminexus Collaboration Portal, and uCosminexus Content Manager
March 30, 2007:	DoS Vulnerability in HiRDB Datareplicator
February 23, 2007:	Vulnerability of the Responder Control Processing of OSAS/FT/W
February 23, 2007:	Multiple Vulnerabilities of JP1/VERITAS NetBackup
February 23, 2007:	Multiple Vulnerabilities of JP1/Cm2/Network Node Manager
February 23, 2007:	Vulnerability of BrightStor ARCserve Backup (Buffer Overflow of Discovery Service)
January 24, 2007:	Multiple Vulnerabilities of Hitachi Web Server
January 24, 2007:	Problem of an OpenTP1 System Server or User Server Going Down
December 21, 2006:	Multiple Vulnerabilities of the LDAP Server
December 21, 2006:	Vulnerability Issue in BrightStor ARCserve Backup
October 11, 2006:	Heap Overflow Vulnerability in RPC Interface of JP1/VERITAS Backup Exec for Windows Servers
July 5, 2006:	Cross-site Scripting Vulnerabilities in Groupmax Collaboration Portal and uCosminexus Collaboration Portal
June 20, 2006:	Vulnerability in the MDAC Function Could Allow Remote Code Execution
June 20, 2006:	Groupmax Address/Mail Server Stopping Issue
May 31, 2006:	SQL Injection Vulnerability in HITSENSER3
May 17, 2006:	SQL Injection Vulnerability in EUR
May 17, 2006:	Multiple Buffer Overflow Vulnerabilities in JP1/VERITAS NetBackup Daemons
May 17, 2006:	DoS and Format String Vulnerabilities in JP1/VERITAS Backup Exec
April 26, 2006:	Groupmax Mail Client Processing Is Stopped by an Email Attachment File
March 31, 2006:	Cross-site Scripting Vulnerability in Groupmax World Wide Web Desktop and Groupmax World Wide Web Desktop for Scheduler
March 31, 2006:	Issue of File Transfer Impossibility in XFIT/S
March 31, 2006:	Vulnerability of Buffer Overflow in BrightStor ARCserve Backup iGateway Service
February 13, 2006:	Cross-site Scripting and SQL Injection Vulnerabilities in Hitachi Business Logic - Container
February 13, 2006:	Buffer Overflow Vulnerability in a Shared Library Used by the Volume Manager Daemon of JP1/VERITAS NetBackup 5.x
January 20, 2006:	JP1/NetInsight II - Port Discovery Service Stopping Issue
January 20, 2006:	SQL Injection Vulnerability in HITSENSER Data Mart Server
December 27, 2005:	Multiple Vulnerabilities of Hitachi Business Logic - Container
November 18, 2005:	Groupmax Mail - SMTP Service Stopping Issue
November 18, 2005:	Cross-site Scripting and DoS Vulnerabilities in Groupmax Collaboration and Cosminexus Collaboration
November 18, 2005:	Multiple Vulnerabilities of Web Utility Function of JP1/Cm2/Network Node Manager
November 18, 2005:	DoS Vulnerability in Groupmax Web Workflow Server Set for Active Server Pages
November 14, 2005:	Vulnerability Regarding the Java Interface Function of JP1/VERITAS NetBackup
November 14, 2005:	Vulnerability to Administrator Privileges Being Granted for the System Registry in a JP1/VERITAS Backup Exec System
October 13, 2005:	Problem when a process for OpenTP1 goes down
September 30, 2005:	Hitachi Cable - WirelessIP5000 Vulnerability (JVN#76659792)
September 30, 2005:	Problem when using unsuitable request body data for Cosminexus Application Server
August 30, 2005:	Vulnerability of JP1/VERITAS Backup Exec
August 30, 2005:	Vulnerability of Buffer Overflow in BrightStor ARCserve Backup Database Agent
July 29, 2005:	Problem with Expiration of the Digital Certificate for JCE (Java Cryptography Extension) 1.2.1
July 20, 2005:	Multiple vulnerabilities of JP1/VERITAS Backup Exec
July 20, 2005:	Vulnerability to Buffer Overflow in the GDIPlus function in JP1/AppManager
June 3, 2005:	Vulnerability of Buffer Overflow in BrightStor ARCserve Backup Universal Client Agent
May 23, 2005:	DoS Vulnerability in JP1/Cm2/Network Node Manager
April 1, 2005:	Vulnerability of Buffer Overflow in Computer Associates License Software
March 22, 2005:	Non-response of Cosminexus Server Component Container for Java
March 14, 2005:	Vulnerability in Authentication Information for Privileged Instructions of BrightStor ARCserve Backup Client Agent (UNIX/Linux)
March 14, 2005:	Vulnerability of Buffer Overflow in BrightStor ARCserve Backup
March 14, 2005:	Vulnerability of Buffer Overflow in LDAP Server
February 8, 2005:	Vulnerability in JP1/VERITAS NetBackup JavaGUI
February 8, 2005:	Vulnerability of Buffer Overflow in JP1/VERITAS Backup Exec

Security Information