Hitachi Hibun PCMCIA Disk Access Restriction Bypass Vulnerability

Bugtraq ID:	14114
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	No
Local:	Yes
Published:	Jun 30 2005 12:00AM
Updated:	Jun 30 2005 12:00AM
Credit:	The vendor announced this vulnerability.
Vulnerable:	Hitachi JP1/Hibun Advanced Edition Information Fortress Hitachi JP1/Hibun Advanced Edition Information Cypher Hitachi Hibun Advanced Edition Information Fortress Hitachi Hibun Advanced Edition Information Cypher
Not Vulnerable:

Hitachi Hibun PCMCIA Disk Access Restriction Bypass Vulnerability

Hitachi Hibun is prone to an access restriction bypass vulnerability. The issue exists because Hibun recognizes an external drive that is connected to a computer through PCMCIA, as an internal disk.

An attacker may exploit this issue to obtain sensitive information that may aid in further attacks against a target computer, user, or network.

Hitachi Hibun PCMCIA Disk Access Restriction Bypass Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Hitachi Hibun PCMCIA Disk Access Restriction Bypass Vulnerability

Solution:
The vendor has released an advisory (HS05-011) and updates to address this issue. Please see the referenced advisory for further information in regards to obtaining and applying these updates.

Hitachi Hibun PCMCIA Disk Access Restriction Bypass Vulnerability

References:

• HS05-011 - Vulnerability to miscontrol of PCMCIA devices by JP1/Hibun (Hitachi)