Hitachi Business Logic Multiple Input Validation Vulnerabilities

Bugtraq ID:	16067
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 27 2005 12:00AM
Updated:	Dec 27 2005 12:00AM
Credit:	Reported by the vendor.
Vulnerable:	Hitachi Business Logic 2.0.6 Hitachi Business Logic 2.0 Hitachi Business Logic 1.1 Hitachi Business Logic 1.0
Not Vulnerable:	Hitachi Business Logic 3.0

Hitachi Business Logic Multiple Input Validation Vulnerabilities

Hitachi Business Logic is prone to multiple input validation vulnerabilities. These issues can lead to SQL injection, cross-site scripting and HTTP response splitting attacks.

Hitachi Business Logic - Container versions 1-00 to 2-06 for Windows and Business Logic - Container versions 1-01 through 2-00 for AIX are vulnerable to these issues.

As specific details about these issues are not currently available, further information cannot be provided. This BID will be updated when more details are available.

Hitachi Business Logic Multiple Input Validation Vulnerabilities

Exploit code is not required.

Hitachi Business Logic Multiple Input Validation Vulnerabilities

Solution:
Hitachi has released advisory HS05-025 to address these issues. Hitachi Business Logic 3-00 for Windows has been released to address these issues. Please contact the vendor to obtain fixes for AIX.

Hitachi Business Logic Multiple Input Validation Vulnerabilities

References:

• HS05-025 - Multiple Vulnerabilities of Hitachi Business Logic - Container (Hitachi)