Hitachi HITSENSER Data Mart Server Unspecified SQL Injection Vulnerabilities

Bugtraq ID:	16326
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 20 2006 12:00AM
Updated:	Feb 07 2006 08:55PM
Credit:	The vendor released this information.
Vulnerable:	Hitachi HITSENSER Data Mart Server BS-M Hitachi HITSENSER Data Mart Server BS-L Hitachi HITSENSER Data Mart Server /EX Hitachi HITSENSER Data Mart Server /BS-S Hitachi HITSENSER Data Mart Server /BS
Not Vulnerable:

Hitachi HITSENSER Data Mart Server Unspecified SQL Injection Vulnerabilities

HITSENSER Data Mart Server is prone to multiple SQL injection vulnerabilities. These are due to a lack of proper sanitization of user-supplied input.

These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

Hitachi HITSENSER Data Mart Server Unspecified SQL Injection Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

Hitachi HITSENSER Data Mart Server Unspecified SQL Injection Vulnerabilities

Solution:

The vendor has released version 01-06-/A to address this issue; please see the reference section for further details.

Hitachi HITSENSER Data Mart Server Unspecified SQL Injection Vulnerabilities

References:

• Hitachi HS05-026 SQL Injection Vulnerability (Hitachi)
  
• SQL Injection Vulnerability in HITSENSER Data Mart Server (Hitachi)