Multiple Hitachi JP1 Products Denial of Service Vulnerability

Bugtraq ID:	17706
Class:	Design Error
CVE:	CVE-2006-2068
Remote:	Yes
Local:	No
Published:	Apr 26 2006 12:00AM
Updated:	Oct 18 2008 05:17PM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	Hitachi System Manager - Management Console 0 Hitachi Server Conductor/Server Manager 0 Hitachi Server Conductor/Blade Server Manager 0 Hitachi JP1/Server Conductor/Server Manager 0 Hitachi JP1/Server Conductor/Blade Server Manager 0 Hitachi JP1/Security Integrated Manager - Runtime Library 0 Hitachi JP1/Security Integrated Manager 0 Hitachi JP1/PFM/SNMP System Observer - Report Feature 0 Hitachi JP1/Performance Management - View 0 Hitachi JP1/Performance Management - Manager 0 Hitachi JP1/Performance Management - Agent 0 Hitachi JP1/File Access Control 0 Hitachi JP1/Cm2/SubManager 06-71 (Windows) Hitachi JP1/Cm2/SubManager 06-51-/A (Windows) Hitachi JP1/Cm2/SubManager 06-51 (Windows) Hitachi JP1/Cm2/SubManager 06-00-/B (Windows) Hitachi JP1/Cm2/SubManager 06-00 (Windows) Hitachi JP1/Cm2/SubManager 05-20-/B(*1) (Window Hitachi JP1/Cm2/SubManager 05-20 (Windows) Hitachi JP1/Cm2/SubManager 05-00-/A(*1) (Window Hitachi JP1/Cm2/SubManager 05-00 (Windows) Hitachi JP1/Cm2/SubManager 0 Hitachi JP1/Cm2/Operations Assist SubManager 07-50 (Windows) Hitachi JP1/Cm2/Operations Assist SubManager 07-50 (Solaris) Hitachi JP1/Cm2/Operations Assist SubManager 07-50 (HP-UX) Hitachi JP1/Cm2/Operations Assist SubManager 07-50 (AIX) Hitachi JP1/Cm2/Operations Assist SubManager 07-10 (Windows) Hitachi JP1/Cm2/Operations Assist SubManager 07-10 (Solaris) Hitachi JP1/Cm2/Operations Assist SubManager 07-10 (HP-UX) Hitachi JP1/Cm2/Operations Assist SubManager 07-10 (AIX) Hitachi JP1/Cm2/Operations Assist SubManager 07-00-/A (Solaris) Hitachi JP1/Cm2/Operations Assist SubManager 07-00 (Windows) Hitachi JP1/Cm2/Operations Assist SubManager 07-00 (Solaris) Hitachi JP1/Cm2/Operations Assist SubManager 07-00 (HP-UX) Hitachi JP1/Cm2/Operations Assist SubManager 07-00 (AIX) Hitachi JP1/Cm2/Operations Assist SubManager 06-71-/B (AIX) Hitachi JP1/Cm2/Operations Assist SubManager 06-71 (Solaris) Hitachi JP1/Cm2/Operations Assist SubManager 06-71 (HP-UX) Hitachi JP1/Cm2/Operations Assist SubManager 06-71 (AIX) Hitachi JP1/Cm2/Operations Assist SubManager 06-51 (AIX) Hitachi JP1/Cm2/Operations Assist SubManager 06-50(*2) (HI-UX/WE2 Hitachi JP1/Cm2/Operations Assist SubManager 06-50 (Solaris) Hitachi JP1/Cm2/Operations Assist SubManager 06-50 (HP-UX) Hitachi JP1/Cm2/Operations Assist SubManager 06-00-/A(*2) (HI-UX/ Hitachi JP1/Cm2/Operations Assist SubManager 06-00-/A (Solaris) Hitachi JP1/Cm2/Operations Assist SubManager 06-00-/A (HP-UX) Hitachi JP1/Cm2/Operations Assist SubManager 06-00 (Solaris) Hitachi JP1/Cm2/Operations Assist SubManager 06-00 (HP-UX) Hitachi JP1/Cm2/Operations Assist SubManager 06-00 (HI-UX/WE2) Hitachi JP1/Cm2/Operations Assist SubManager 05-20-/A(*2) (HI-UX/ Hitachi JP1/Cm2/Operations Assist SubManager 05-20(*1) (Solaris) Hitachi JP1/Cm2/Operations Assist SubManager 05-20(*1) (HP-UX) Hitachi JP1/Cm2/Operations Assist SubManager 05-20 (HI-UX/WE2) Hitachi JP1/Cm2/Operations Assist SubManager 05-00(*2) (HI-UX/WE2 Hitachi JP1/Cm2/Operations Assist SubManager 05-00(*1) (Solaris) Hitachi JP1/Cm2/Operations Assist SubManager 05-00(*1) (HP-UX) Hitachi JP1/Cm2/Operations Assist SubManager 0 Hitachi JP1/Cm2/Operations Assist Manager 07-50-02 (Windows) Hitachi JP1/Cm2/Operations Assist Manager 07-50-02 (Solaris) Hitachi JP1/Cm2/Operations Assist Manager 07-50-02 (HP-UX) Hitachi JP1/Cm2/Operations Assist Manager 07-50 (Windows) Hitachi JP1/Cm2/Operations Assist Manager 07-50 (Solaris) Hitachi JP1/Cm2/Operations Assist Manager 07-50 (HP-UX) Hitachi JP1/Cm2/Operations Assist Manager 07-11 (Windows) Hitachi JP1/Cm2/Operations Assist Manager 07-11 (Solaris) Hitachi JP1/Cm2/Operations Assist Manager 07-11 (HP-UX) Hitachi JP1/Cm2/Operations Assist Manager 07-10 (Windows) Hitachi JP1/Cm2/Operations Assist Manager 07-10 (Solaris) Hitachi JP1/Cm2/Operations Assist Manager 07-10 (HP-UX) Hitachi JP1/Cm2/Operations Assist Manager 07-00-/B (Windows) Hitachi JP1/Cm2/Operations Assist Manager 07-00-/B (Solaris) Hitachi JP1/Cm2/Operations Assist Manager 07-00 (Windows) Hitachi JP1/Cm2/Operations Assist Manager 07-00 (Solaris) Hitachi JP1/Cm2/Operations Assist Manager 07-00 (HP-UX) Hitachi JP1/Cm2/Operations Assist Manager 06-71-/F (Windows) Hitachi JP1/Cm2/Operations Assist Manager 06-71-/B (Solaris) Hitachi JP1/Cm2/Operations Assist Manager 06-71-/A (HP-UX) Hitachi JP1/Cm2/Operations Assist Manager 06-71(*2) (AIX) Hitachi JP1/Cm2/Operations Assist Manager 06-71 (Windows) Hitachi JP1/Cm2/Operations Assist Manager 06-71 (Solaris) Hitachi JP1/Cm2/Operations Assist Manager 06-71 (HP-UX) Hitachi JP1/Cm2/Operations Assist Manager 06-50-/E (Windows) Hitachi JP1/Cm2/Operations Assist Manager 06-50-/B (HP-UX) Hitachi JP1/Cm2/Operations Assist Manager 06-50 (Windows) Hitachi JP1/Cm2/Operations Assist Manager 06-50 (Solaris) Hitachi JP1/Cm2/Operations Assist Manager 06-50 (HP-UX) Hitachi JP1/Cm2/Operations Assist Manager 06-00-/C (Windows) Hitachi JP1/Cm2/Operations Assist Manager 06-00-/B (Solaris) Hitachi JP1/Cm2/Operations Assist Manager 06-00-/B (HP-UX) Hitachi JP1/Cm2/Operations Assist Manager 06-00 (Windows) Hitachi JP1/Cm2/Operations Assist Manager 06-00 (Solaris) Hitachi JP1/Cm2/Operations Assist Manager 06-00 (HP-UX) Hitachi JP1/Cm2/Operations Assist Manager 05-20-/F(*1) (Window Hitachi JP1/Cm2/Operations Assist Manager 05-20-/C(*1) (HP-UX) Hitachi JP1/Cm2/Operations Assist Manager 05-20(*1) (Solaris) Hitachi JP1/Cm2/Operations Assist Manager 05-20 (Windows) Hitachi JP1/Cm2/Operations Assist Manager 05-20 (HP-UX) Hitachi JP1/Cm2/Operations Assist Manager 05-00-/C(*1) (Window Hitachi JP1/Cm2/Operations Assist Manager 05-00(*2) (HI-UX/WE2 Hitachi JP1/Cm2/Operations Assist Manager 05-00(*1) (HP-UX) Hitachi JP1/Cm2/Operations Assist Manager 05-00 (Windows) Hitachi JP1/Cm2/Operations Assist Manager 0 Hitachi JP1/Cm2/Operation Assist Agent 07-50 (Windows) Hitachi JP1/Cm2/Operation Assist Agent 07-10 (Windows) Hitachi JP1/Cm2/Operation Assist Agent 07-00-/C (Windows) Hitachi JP1/Cm2/Operation Assist Agent 07-00 (Windows) Hitachi JP1/Cm2/Operation Assist Agent 0 Hitachi JP1/Cm2/Network Node Manager Enterprise 0 Hitachi JP1/Cm2/Network Node Manager 250 0 Hitachi JP1/Cm2/Network Node Manager 0 Hitachi JP1/Cm2/Extensible Agent 06-71-/K (Windows) Hitachi JP1/Cm2/Extensible Agent 06-71 (Windows) Hitachi JP1/Cm2/Extensible Agent 06-50-/J (Windows) Hitachi JP1/Cm2/Extensible Agent 06-50 (Windows) Hitachi JP1/Cm2/Extensible Agent 06-01 (Windows) Hitachi JP1/Cm2/Extensible Agent 06-00-/E (Windows) Hitachi JP1/Cm2/Extensible Agent 06-00 (Windows) Hitachi JP1/Cm2/Extensible Agent 05-20-/K(*1) (Window Hitachi JP1/Cm2/Extensible Agent 05-20 (Windows) Hitachi JP1/Cm2/Extensible Agent 05-00-/H(*1) (Window Hitachi JP1/Cm2/Extensible Agent 05-00 (Windows) Hitachi JP1/Cm2/Extensible Agent 0 Hitachi JP1/Automatic Job Management System 2 - Manager 0 Hitachi JP1/Automatic Job Management System 2 - Light Edit 0 Hitachi JP1/Automatic Job Management System 2 - Agent 0 Hitachi Cm2/Network Node Manager Unlimited 0 Hitachi Cm2/Network Node Manager Enterprise 0 Hitachi Cm2/Network Node Manager 250 0
Not Vulnerable:	Hitachi JP1/Cm2/SubManager 06-71-/A (Windows) Hitachi JP1/Cm2/Operations Assist SubManager 07-50-01 (Windows) Hitachi JP1/Cm2/Operations Assist SubManager 07-50-01 (Solaris) Hitachi JP1/Cm2/Operations Assist SubManager 07-50-01 (HP-UX) Hitachi JP1/Cm2/Operations Assist SubManager 07-50-01 (AIX) Hitachi JP1/Cm2/Operations Assist SubManager 06-71-/C (AIX) Hitachi JP1/Cm2/Operations Assist SubManager 06-71-/A (Solaris) Hitachi JP1/Cm2/Operations Assist SubManager 06-71-/A (HP-UX) Hitachi JP1/Cm2/Operations Assist Manager 07-50-03 (Windows) Hitachi JP1/Cm2/Operations Assist Manager 07-50-03 (Solaris) Hitachi JP1/Cm2/Operations Assist Manager 07-50-03 (HP-UX) Hitachi JP1/Cm2/Operations Assist Manager 06-71-/G (Windows) Hitachi JP1/Cm2/Operations Assist Manager 06-71-/C (Solaris) Hitachi JP1/Cm2/Operations Assist Manager 06-71-/B (HP-UX) Hitachi JP1/Cm2/Operation Assist Agent 07-50-01 (Windows) Hitachi JP1/Cm2/Operation Assist Agent 07-10-/A (Windows) Hitachi JP1/Cm2/Extensible Agent 06-71-/L (Windows)

Multiple Hitachi JP1 Products Denial of Service Vulnerability

Multiple JP1 products are prone to a denial-of-service vulnerability.

An attacker can exploit this issue to cause affected products to become unresponsive, resulting in a denial of service to legitimate users.

This issue affects multiple models and versions of Hitachi JP1 products. Specific models and versions will be listed in future revisions of this BID.

Multiple Hitachi JP1 Products Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

Multiple Hitachi JP1 Products Denial of Service Vulnerability

Solution:
The vendor has released updated versions of affected applications to address this issue. Consult the referenced vendor advisory for details on obtaining and applying the appropriate updates.

Multiple Hitachi JP1 Products Denial of Service Vulnerability

References:

• Hitachi Home Page (Hitachi)
  
• Job Management Partner 1 Home Page (Hitachi)
  
• Vulnerability of DoS in JP1 Products (Hitachi)
  
• HS06-007-09 Vulnerability of DoS in JP1/Cm2 operation assist products (Hitachi)