Hitachi Web Server HTML Injection Vulnerability and Signature Forgery Vulnerability

Bugtraq ID:	26271
Class:	Unknown
CVE:	CVE-2007-5809 CVE-2007-5810
Remote:	Yes
Local:	No
Published:	Oct 31 2007 12:00AM
Updated:	Jun 05 2009 02:39PM
Credit:	The vendor reported these issues.
Vulnerable:	Hitachi Web Server 03-10 (Windows) Hitachi Web Server 03-10 (AIX) Hitachi Web Server 03-00-01 (Windows) Hitachi Web Server 03-00-01 (Linux) Hitachi Web Server 03-00-01 (Linux IPF) Hitachi Web Server 03-00 (Windows) Hitachi Web Server 03-00 (Solaris) Hitachi Web Server 03-00 (Linux) Hitachi Web Server 03-00 (Linux IPF) Hitachi Web Server 03-00 (HP-UX) Hitachi Web Server 03-00 (HP-UX IPF) Hitachi Web Server 03-00 (AIX) Hitachi Web Server 02-06-/A (Linux) Hitachi Web Server 02-04-/D (Windows) Hitachi Web Server 02-04-/B (Solaris) Hitachi Web Server 02-04-/B (Linux(IPF) Hitachi Web Server 02-04-/B (HP-UX) Hitachi Web Server 02-04-/B (HP-UX IPF) Hitachi Web Server 02-04-/B (AIX) Hitachi Web Server 02-04-/A (Windows IP Hitachi Web Server 02-03 (Windows IPF) Hitachi Web Server 02-02 (Linux) Hitachi Web Server 02-02 (Linux IPF) Hitachi Web Server 02-02 (HP-UX IPF) Hitachi Web Server 02-00-/A (Linux) Hitachi Web Server 02-00 (Windows) Hitachi Web Server 02-00 (Turbolinux) Hitachi Web Server 02-00 (Solaris) Hitachi Web Server 02-00 (Linux) Hitachi Web Server 02-00 (HP-UX) Hitachi Web Server 02-00 (AIX) Hitachi Web Server 01-02-/E (AIX) Hitachi Web Server 01-02-/D (Solaris) Hitachi Web Server 01-02-/D (HP-UX) Hitachi Web Server 01-01-/D (Linux) Hitachi Web Server 01-01 (Turbolinux) Hitachi Web Server 01-01 (Linux) Hitachi Web Server 01-01 (AIX) Hitachi Web Server 01-00 (Solaris) Hitachi Web Server 01-00 (HP-UX) Hitachi Web Server 0 Hitachi uCosminexus Service Platform 7 Hitachi uCosminexus Service Platform 07-50-01 (Windows) Hitachi uCosminexus Service Platform 07-50 (Windows) Hitachi uCosminexus Service Platform 07-50 (Linux) Hitachi uCosminexus Service Platform 07-50 (AIX) Hitachi uCosminexus Service Platform 07-20-01 (Windows) Hitachi uCosminexus Service Platform 07-20 (Windows) Hitachi uCosminexus Service Platform 07-10 (Windows) Hitachi uCosminexus Service Platform 07-10 (Linux) Hitachi uCosminexus Service Platform 07-10 (AIX) Hitachi uCosminexus Service Platform 07-00-03 (Windows) Hitachi uCosminexus Service Platform 07-00 (Windows) Hitachi uCosminexus Service Platform 07-00 (Linux) Hitachi uCosminexus Service Architect 7 Hitachi uCosminexus Service Architect 07-50-01 (Windows) Hitachi uCosminexus Service Architect 07-50 (Windows) Hitachi uCosminexus Service Architect 07-20-01 (Windows) Hitachi uCosminexus Service Architect 07-20 (Windows) Hitachi uCosminexus Service Architect 07-10-01 (Windows) Hitachi uCosminexus Service Architect 07-10 (Windows) Hitachi uCosminexus Service Architect 07-00-03 (Windows) Hitachi uCosminexus Service Architect 07-00 (Windows) Hitachi uCosminexus Developer Standard 7 Hitachi uCosminexus Developer Standard 6.7 Hitachi uCosminexus Developer Standard 07-50-01 (Windows) Hitachi uCosminexus Developer Standard 07-50 (Windows) Hitachi uCosminexus Developer Standard 07-20-01 (Windows) Hitachi uCosminexus Developer Standard 07-20 (Windows) Hitachi uCosminexus Developer Standard 07-10-01 (Windows) Hitachi uCosminexus Developer Standard 07-10 (Windows) Hitachi uCosminexus Developer Standard 07-00-03 (Windows) Hitachi uCosminexus Developer Standard 07-00 (Windows) Hitachi uCosminexus Developer Standard 06-71-/D (Windows) Hitachi uCosminexus Developer Standard 06-71 (Windows) Hitachi uCosminexus Developer Standard 06-70-/D (Windows) Hitachi uCosminexus Developer Standard 06-70 (Windows) Hitachi uCosminexus Developer Professional 7 Hitachi uCosminexus Developer Professional 6.7 Hitachi uCosminexus Developer Professional 07-50-01 (Windows) Hitachi uCosminexus Developer Professional 07-50 (Windows) Hitachi uCosminexus Developer Professional 07-20-01 (Windows) Hitachi uCosminexus Developer Professional 07-20 (Windows) Hitachi uCosminexus Developer Professional 07-10-01 (Windows) Hitachi uCosminexus Developer Professional 07-10 (Windows) Hitachi uCosminexus Developer Professional 07-00-03 (Windows) Hitachi uCosminexus Developer Professional 07-00 (Windows) Hitachi uCosminexus Developer Professional 06-71-/D (Windows) Hitachi uCosminexus Developer Professional 06-71 (Windows) Hitachi uCosminexus Developer Professional 06-70-/D (Windows) Hitachi uCosminexus Developer Professional 06-70 (Windows) Hitachi uCosminexus Developer Light 6.7 Hitachi uCosminexus Developer Light 06-71-/D (Windows) Hitachi uCosminexus Developer Light 06-71 (Windows) Hitachi uCosminexus Developer Light 06-70-/D (Windows) Hitachi uCosminexus Developer Light 06-70 (Windows) Hitachi uCosminexus Application Server Standard 7 Hitachi uCosminexus Application Server Standard 6.7 Hitachi uCosminexus Application Server Standard 07-50-01 (Windows) Hitachi uCosminexus Application Server Standard 07-50 (Windows) Hitachi uCosminexus Application Server Standard 07-50 (Linux) Hitachi uCosminexus Application Server Standard 07-50 (AIX) Hitachi uCosminexus Application Server Standard 07-20-01 (Windows) Hitachi uCosminexus Application Server Standard 07-20 (Windows) Hitachi uCosminexus Application Server Standard 07-10-01 HP-UX(IPF) Hitachi uCosminexus Application Server Standard 07-10-01 (Windows) Hitachi uCosminexus Application Server Standard 07-10-01 (Linux(IPF) Hitachi uCosminexus Application Server Standard 07-10 (Windows) Hitachi uCosminexus Application Server Standard 07-10 (Solaris) Hitachi uCosminexus Application Server Standard 07-10 (Linux) Hitachi uCosminexus Application Server Standard 07-10 (Linux(IPF)) Hitachi uCosminexus Application Server Standard 07-10 (HP-UX) Hitachi uCosminexus Application Server Standard 07-10 (HP-UX(IPF)) Hitachi uCosminexus Application Server Standard 07-10 (AIX) Hitachi uCosminexus Application Server Standard 07-00-03 (Windows) Hitachi uCosminexus Application Server Standard 07-00-01 (Linux) Hitachi uCosminexus Application Server Standard 07-00 (Windows) Hitachi uCosminexus Application Server Standard 07-00 (Solaris) Hitachi uCosminexus Application Server Standard 07-00 (Linux) Hitachi uCosminexus Application Server Standard 07-00 (HP-UX(IPF)) Hitachi uCosminexus Application Server Standard 07-00 (AIX) Hitachi uCosminexus Application Server Standard 06-72-/A (HP-UX) Hitachi uCosminexus Application Server Standard 06-72 (HP-UX) Hitachi uCosminexus Application Server Standard 06-71-/D (Windows) Hitachi uCosminexus Application Server Standard 06-71-/D (Linux) Hitachi uCosminexus Application Server Standard 06-71 (Windows) Hitachi uCosminexus Application Server Standard 06-71 (Linux) Hitachi uCosminexus Application Server Standard 06-70-/K (HP-UX(IPF) Hitachi uCosminexus Application Server Standard 06-70-/D (Windows) Hitachi uCosminexus Application Server Standard 06-70-/D (Solaris) Hitachi uCosminexus Application Server Standard 06-70-/D (Linux) Hitachi uCosminexus Application Server Standard 06-70-/C (HP-UX) Hitachi uCosminexus Application Server Standard 06-70 (Windows) Hitachi uCosminexus Application Server Standard 06-70 (Solaris) Hitachi uCosminexus Application Server Standard 06-70 (Linux) Hitachi uCosminexus Application Server Standard 06-70 (HP-UX) Hitachi uCosminexus Application Server Standard 06-70 (HP-UX(IPF)) Hitachi uCosminexus Application Server Standard 06-70 (AIX) Hitachi uCosminexus Application Server Enterprise 7 Hitachi uCosminexus Application Server Enterprise 6.7 Hitachi uCosminexus Application Server Enterprise 07-50-01 (Windows) Hitachi uCosminexus Application Server Enterprise 07-50 (Windows) Hitachi uCosminexus Application Server Enterprise 07-50 (Linux) Hitachi uCosminexus Application Server Enterprise 07-50 (AIX) Hitachi uCosminexus Application Server Enterprise 07-20-01 (Windows) Hitachi uCosminexus Application Server Enterprise 07-20 (Windows) Hitachi uCosminexus Application Server Enterprise 07-10-1 (Linux(IPF)) Hitachi uCosminexus Application Server Enterprise 07-10-01 HP-UX(IPF) Hitachi uCosminexus Application Server Enterprise 07-10-01 (Windows) Hitachi uCosminexus Application Server Enterprise 07-10 (Windows) Hitachi uCosminexus Application Server Enterprise 07-10 (Solaris) Hitachi uCosminexus Application Server Enterprise 07-10 (Linux) Hitachi uCosminexus Application Server Enterprise 07-10 (Linux(IPF)) Hitachi uCosminexus Application Server Enterprise 07-10 (HP-UX) Hitachi uCosminexus Application Server Enterprise 07-10 (HP-UX(IPF)) Hitachi uCosminexus Application Server Enterprise 07-10 (AIX) Hitachi uCosminexus Application Server Enterprise 07-00-03 (Windows) Hitachi uCosminexus Application Server Enterprise 07-00-01 (Linux) Hitachi uCosminexus Application Server Enterprise 07-00 (Windows) Hitachi uCosminexus Application Server Enterprise 07-00 (Solaris) Hitachi uCosminexus Application Server Enterprise 07-00 (Linux) Hitachi uCosminexus Application Server Enterprise 07-00 (HP-UX(IPF)) Hitachi uCosminexus Application Server Enterprise 07-00 (AIX) Hitachi uCosminexus Application Server Enterprise 06-71-/D (Windows) Hitachi uCosminexus Application Server Enterprise 06-71-/D (Linux) Hitachi uCosminexus Application Server Enterprise 06-71 (Windows) Hitachi uCosminexus Application Server Enterprise 06-71 (Linux) Hitachi uCosminexus Application Server Enterprise 06-70-/F (HP-UX(IPF) Hitachi uCosminexus Application Server Enterprise 06-70-/D (Windows) Hitachi uCosminexus Application Server Enterprise 06-70-/D (Solaris) Hitachi uCosminexus Application Server Enterprise 06-70-/D (Linux) Hitachi uCosminexus Application Server Enterprise 06-70-/C (Linux(IPF) Hitachi uCosminexus Application Server Enterprise 06-70-/C (HP-UX) Hitachi uCosminexus Application Server Enterprise 06-70-/B (AIX) Hitachi uCosminexus Application Server Enterprise 06-70-/A (Windows(IP Hitachi uCosminexus Application Server Enterprise 06-70 (Windows) Hitachi uCosminexus Application Server Enterprise 06-70 (Windows(IPF)) Hitachi uCosminexus Application Server Enterprise 06-70 (Solaris) Hitachi uCosminexus Application Server Enterprise 06-70 (Linux) Hitachi uCosminexus Application Server Enterprise 06-70 (Linux(IPF)) Hitachi uCosminexus Application Server Enterprise 06-70 (HP-UX) Hitachi uCosminexus Application Server Enterprise 06-70 (HP-UX(IPF)) Hitachi uCosminexus Application Server Enterprise 06-70 (AIX) Hitachi Cosminexus Server Web Edition 4 Hitachi Cosminexus Server Web Edition 3 Hitachi Cosminexus Server Standard Edition 4 Hitachi Cosminexus Server Enterprise Edition 3 Hitachi Cosminexus Server - Web Edition 04-01 (Solaris) Hitachi Cosminexus Server - Web Edition 04-01 (HP-UX) Hitachi Cosminexus Server - Web Edition 03-05 (Solaris) Hitachi Cosminexus Server - Web Edition 03-05 (HP-UX) Hitachi Cosminexus Server - Web Edition 03-00 (Solaris) Hitachi Cosminexus Server - Web Edition 03-00 (HP-UX) Hitachi Cosminexus Server - Standard Edition 04-01 (Solaris) Hitachi Cosminexus Server - Standard Edition 04-01 (HP-UX) Hitachi Cosminexus Server - Standard Edition 04-01 (AIX) Hitachi Cosminexus Server - Standard Edition 03-05 (Solaris) Hitachi Cosminexus Server - Standard Edition 03-05 (HP-UX) Hitachi Cosminexus Server - Standard Edition 03-00 (Solaris) Hitachi Cosminexus Server - Standard Edition 03-00 (HP-UX) Hitachi Cosminexus Server - Enterprise Edition 03-05 (Solaris) Hitachi Cosminexus Server - Enterprise Edition 03-05 (HP-UX) Hitachi Cosminexus Server - Enterprise Edition 03-00 (Solaris) Hitachi Cosminexus Server - Enterprise Edition 03-00 (HP-UX) Hitachi Cosminexus Developer Standard 6 Hitachi Cosminexus Developer Standard 06-51-/J (Windows) Hitachi Cosminexus Developer Standard 06-51 (Windows) Hitachi Cosminexus Developer Standard 06-50-/F (Windows) Hitachi Cosminexus Developer Standard 06-50 (Windows) Hitachi Cosminexus Developer Standard 06-02-/G (Windows) Hitachi Cosminexus Developer Standard 06-02 (Windows) Hitachi Cosminexus Developer Standard 06-00-/H (Windows) Hitachi Cosminexus Developer Standard 06-00 (Windows) Hitachi Cosminexus Developer Professional 6 Hitachi Cosminexus Developer Professional 06-51-/J (Windows) Hitachi Cosminexus Developer Professional 06-51 (Windows) Hitachi Cosminexus Developer Professional 06-50-/F (Windows) Hitachi Cosminexus Developer Professional 06-50 (Windows) Hitachi Cosminexus Developer Professional 06-02-/G (Windows) Hitachi Cosminexus Developer Professional 06-02 (Windows) Hitachi Cosminexus Developer Professional 06-00-/H (Windows) Hitachi Cosminexus Developer Professional 06-00 (Windows) Hitachi Cosminexus Developer Light 6 Hitachi Cosminexus Developer Light 06-51-/J (Windows) Hitachi Cosminexus Developer Light 06-51 (Windows) Hitachi Cosminexus Developer Light 06-50-/F (Windows) Hitachi Cosminexus Developer Light 06-50 (Windows) Hitachi Cosminexus Developer Light 06-02-/G (Windows) Hitachi Cosminexus Developer Light 06-02 (Windows) Hitachi Cosminexus Developer Light 06-00-/H (Windows) Hitachi Cosminexus Developer Light 06-00 (Windows) Hitachi Cosminexus Developer 05-05-/P (Windows) Hitachi Cosminexus Developer 05-05 (Windows) Hitachi Cosminexus Developer 05-01-/L (Windows) Hitachi Cosminexus Developer 05-01 (Windows) Hitachi Cosminexus Application Server Standard 6 Hitachi Cosminexus Application Server Standard 3 Hitachi Cosminexus Application Server Standard 06-51-/J (Windows) Hitachi Cosminexus Application Server Standard 06-51-/D (Linux) Hitachi Cosminexus Application Server Standard 06-51-/B (Linux(IPF) Hitachi Cosminexus Application Server Standard 06-51 (Windows) Hitachi Cosminexus Application Server Standard 06-51 (Windows(IPF)) Hitachi Cosminexus Application Server Standard 06-51 (Linux) Hitachi Cosminexus Application Server Standard 06-51 (Linux(IPF)) Hitachi Cosminexus Application Server Standard 06-50-/G (AIX) Hitachi Cosminexus Application Server Standard 06-50-/F (Windows) Hitachi Cosminexus Application Server Standard 06-50-/E (HP-UX) Hitachi Cosminexus Application Server Standard 06-50-/E (HP-UX(IPF) Hitachi Cosminexus Application Server Standard 06-50-/C (Solaris) Hitachi Cosminexus Application Server Standard 06-50-/C (Linux) Hitachi Cosminexus Application Server Standard 06-50-/B(Linux(IPF)) Hitachi Cosminexus Application Server Standard 06-50 (Windows) Hitachi Cosminexus Application Server Standard 06-50 (Solaris) Hitachi Cosminexus Application Server Standard 06-50 (Linux) Hitachi Cosminexus Application Server Standard 06-50 (Linux(IPF)) Hitachi Cosminexus Application Server Standard 06-50 (HP-UX) Hitachi Cosminexus Application Server Standard 06-50 (HP-UX(IPF)) Hitachi Cosminexus Application Server Standard 06-50 (AIX) Hitachi Cosminexus Application Server Standard 06-02-/G (Windows) Hitachi Cosminexus Application Server Standard 06-02-/F (Linux) Hitachi Cosminexus Application Server Standard 06-02-/D (Linux(IPF) Hitachi Cosminexus Application Server Standard 06-02 (Windows) Hitachi Cosminexus Application Server Standard 06-02 (Linux) Hitachi Cosminexus Application Server Standard 06-02 (Linux(IPF)) Hitachi Cosminexus Application Server Standard 06-00-/H (Windows) Hitachi Cosminexus Application Server Standard 06-00-/G (AIX) Hitachi Cosminexus Application Server Standard 06-00-/E (HP-UX(IPF) Hitachi Cosminexus Application Server Standard 06-00-/D (Linux) Hitachi Cosminexus Application Server Standard 06-00-/D (HP-UX) Hitachi Cosminexus Application Server Standard 06-00-/B (Linux(IPF) Hitachi Cosminexus Application Server Standard 06-00-/A (Solaris) Hitachi Cosminexus Application Server Standard 06-00 (Windows) Hitachi Cosminexus Application Server Standard 06-00 (Windows(IPF)) Hitachi Cosminexus Application Server Standard 06-00 (Solaris) Hitachi Cosminexus Application Server Standard 06-00 (Linux) Hitachi Cosminexus Application Server Standard 06-00 (Linux(IPF)) Hitachi Cosminexus Application Server Standard 06-00 (HP-UX) Hitachi Cosminexus Application Server Standard 06-00 (HP-UX(IPF)) Hitachi Cosminexus Application Server Standard 06-00 (AIX) Hitachi Cosminexus Application Server Enterprise 6 Hitachi Cosminexus Application Server Enterprise 06-51-/J (Windows) Hitachi Cosminexus Application Server Enterprise 06-51-/D (Linux) Hitachi Cosminexus Application Server Enterprise 06-51-/B (Linux(IPF) Hitachi Cosminexus Application Server Enterprise 06-51 (Windows) Hitachi Cosminexus Application Server Enterprise 06-51 (Windows(IPF)) Hitachi Cosminexus Application Server Enterprise 06-51 (Linux) Hitachi Cosminexus Application Server Enterprise 06-51 (Linux(IPF)) Hitachi Cosminexus Application Server Enterprise 06-50-/G (AIX) Hitachi Cosminexus Application Server Enterprise 06-50-/F (Windows) Hitachi Cosminexus Application Server Enterprise 06-50-/E (HP-UX) Hitachi Cosminexus Application Server Enterprise 06-50-/E (HP-UX(IPF) Hitachi Cosminexus Application Server Enterprise 06-50-/C (Solaris) Hitachi Cosminexus Application Server Enterprise 06-50-/C (Linux) Hitachi Cosminexus Application Server Enterprise 06-50-/B (Linux(IPF) Hitachi Cosminexus Application Server Enterprise 06-50 (Windows) Hitachi Cosminexus Application Server Enterprise 06-50 (Solaris) Hitachi Cosminexus Application Server Enterprise 06-50 (Linux) Hitachi Cosminexus Application Server Enterprise 06-50 (HP-UX) Hitachi Cosminexus Application Server Enterprise 06-50 (HP-UX(IPF)) Hitachi Cosminexus Application Server Enterprise 06-50 (HP-UX(IPF)) Hitachi Cosminexus Application Server Enterprise 06-50 (AIX) Hitachi Cosminexus Application Server Enterprise 06-02-/G (Windows) Hitachi Cosminexus Application Server Enterprise 06-02-/F (Linux) Hitachi Cosminexus Application Server Enterprise 06-02-/D (Linux(IPF) Hitachi Cosminexus Application Server Enterprise 06-02 (Windows) Hitachi Cosminexus Application Server Enterprise 06-02 (Linux) Hitachi Cosminexus Application Server Enterprise 06-02 (Linux(IPF)) Hitachi Cosminexus Application Server Enterprise 06-00-/H (Windows) Hitachi Cosminexus Application Server Enterprise 06-00-/G (AIX) Hitachi Cosminexus Application Server Enterprise 06-00-/E (HP-UX(IPF) Hitachi Cosminexus Application Server Enterprise 06-00-/D (Linux) Hitachi Cosminexus Application Server Enterprise 06-00-/D (HP-UX) Hitachi Cosminexus Application Server Enterprise 06-00-/B (Linux(IPF) Hitachi Cosminexus Application Server Enterprise 06-00-/A (Solaris) Hitachi Cosminexus Application Server Enterprise 06-00 (Windows) Hitachi Cosminexus Application Server Enterprise 06-00 (Windows(IPF)) Hitachi Cosminexus Application Server Enterprise 06-00 (Solaris) Hitachi Cosminexus Application Server Enterprise 06-00 (Linux) Hitachi Cosminexus Application Server Enterprise 06-00 (Linux(IPF)) Hitachi Cosminexus Application Server Enterprise 06-00 (HP-UX) Hitachi Cosminexus Application Server Enterprise 06-00 (HP-UX(IPF)) Hitachi Cosminexus Application Server Enterprise 06-00 (AIX) Hitachi Cosminexus Application Server 5 Hitachi Cosminexus Application Server 05-05-/P (Windows) Hitachi Cosminexus Application Server 05-05-/M (AIX) Hitachi Cosminexus Application Server 05-05-/I (Linux) Hitachi Cosminexus Application Server 05-05-/H (HP-UX) Hitachi Cosminexus Application Server 05-05 (Windows) Hitachi Cosminexus Application Server 05-05 (Linux) Hitachi Cosminexus Application Server 05-05 (HP-UX) Hitachi Cosminexus Application Server 05-05 (AIX) Hitachi Cosminexus Application Server 05-02-/E (HP-UX) Hitachi Cosminexus Application Server 05-02 (HP-UX) Hitachi Cosminexus Application Server 05-01-/L (Windows) Hitachi Cosminexus Application Server 05-01 (Windows) Hitachi Cosminexus Application Server 05-00-/R (AIX) Hitachi Cosminexus Application Server 05-00-/C (HP-UX) Hitachi Cosminexus Application Server 05-00 (HP-UX) Hitachi Cosminexus Application Server 05-00 (AIX)
Not Vulnerable:	Hitachi Web Server 03-10-01 (Windows) Hitachi Web Server 03-00-02 (Windows) Hitachi Web Server 03-00-01 (Solaris) Hitachi Web Server 03-00-01 (HP-UX) Hitachi Web Server 03-00-01 (HP-UX IPF) Hitachi Web Server 03-00-01 (AIX) Hitachi Web Server 02-06-/F (Linux) Hitachi Web Server 02-06-/B (Linux) Hitachi Web Server 02-04-/F (Windows) Hitachi Web Server 02-04-/F (HP-UX) Hitachi Web Server 02-04-/E (Windows) Hitachi Web Server 02-04-/E (HP-UX(IPF) Hitachi Web Server 02-04-/E (AIX) Hitachi Web Server 02-04-/C (Solaris) Hitachi Web Server 02-04-/C (Linux IPF) Hitachi Web Server 02-04-/C (HP-UX) Hitachi Web Server 02-04-/C (HP-UX IPF) Hitachi Web Server 02-04-/C (AIX)

Hitachi Web Server HTML Injection Vulnerability and Signature Forgery Vulnerability

Hitachi Web Server is prone to an HTML-injection vulnerability and a vulnerability that allow attackers to forge digital signatures in an SSL certificate.

An attacker could exploit these issues to execute arbitrary code within the context of the webserver process, steal cookie-based authentication credentials, sign digital certificates, and take advantage of trust relationships that may depend on these credentials.

Hitachi Web Server HTML Injection Vulnerability and Signature Forgery Vulnerability

An attacker could exploit the HTML-injection issue through a browser. The attacker could exploit the signature-forgery vulnerability by using readily available network utilities.

Hitachi Web Server HTML Injection Vulnerability and Signature Forgery Vulnerability

Solution:
The vendor has released updates and advisories to address these issues. Please see the references for details.

Hitachi Web Server HTML Injection Vulnerability and Signature Forgery Vulnerability

References:

• Hitachi Device Manager Homepage ( Hitachi)
  
• Cross-Site Scripting Vulnerability in Hitachi Web Server Function for Creating S (Hitachi)
  
• Vulnerability in Hitachi Web Server Function for Authenticating SSL Clients (Hitachi)