Hitachi JP1/File Transmission Server/FTP File Modfication Unauthorized Access Vulnerability

Bugtraq ID:	31803
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Oct 17 2008 12:00AM
Updated:	Oct 20 2008 03:46PM
Credit:	Reported by the vendor
Vulnerable:	Hitachi JP1/File Transmission Server/FTP Linux(IPF) 0 Hitachi JP1/File Transmission Server/FTP (Solaris) 0 Hitachi JP1/File Transmission Server/FTP (Linux) 0 Hitachi JP1/File Transmission Server/FTP (Linux) 0 Hitachi JP1/File Transmission Server/FTP (Linux(IPF)) 07-20-/D Hitachi JP1/File Transmission Server/FTP (Linux(IPF)) 0 Hitachi JP1/File Transmission Server/FTP (Linux(IPF)) 0 Hitachi JP1/File Transmission Server/FTP (Linux(IPF)) 0 Hitachi JP1/File Transmission Server/FTP (HP-UX) 07-50-01 Hitachi JP1/File Transmission Server/FTP (HP-UX) 0 Hitachi JP1/File Transmission Server/FTP (HP-UX(IPF)) 0 Hitachi JP1/File Transmission Server/FTP (HI-UX/WE2(*2)) 0 Hitachi JP1/File Transmission Server/FTP (AIX) 0 Hitachi JP1/File Transmission Server/FTP 08-50 (Solaris) Hitachi JP1/File Transmission Server/FTP 08-50 (Linux) Hitachi JP1/File Transmission Server/FTP 08-50 (HP-UX) Hitachi JP1/File Transmission Server/FTP 08-50 (AIX) Hitachi JP1/File Transmission Server/FTP 08-10-03 (Solaris) Hitachi JP1/File Transmission Server/FTP 08-10-03 (Linux) Hitachi JP1/File Transmission Server/FTP 08-10-03 (HP-UX) Hitachi JP1/File Transmission Server/FTP 08-10-03 (AIX) Hitachi JP1/File Transmission Server/FTP 08-10-02 (Solaris) Hitachi JP1/File Transmission Server/FTP 08-10-02 (Linux(IPF) Hitachi JP1/File Transmission Server/FTP 08-10-02 (HP-UX) Hitachi JP1/File Transmission Server/FTP 08-10-02 (HP-UX(IPF) Hitachi JP1/File Transmission Server/FTP 08-10-02 (AIX) Hitachi JP1/File Transmission Server/FTP 08-10-01 HP-UX(IPF) Hitachi JP1/File Transmission Server/FTP 08-10-01 (Solaris) Hitachi JP1/File Transmission Server/FTP 08-10-01 (Linux) Hitachi JP1/File Transmission Server/FTP 08-10-01 (Linux - IP Hitachi JP1/File Transmission Server/FTP 08-10-01 (HP-UX) Hitachi JP1/File Transmission Server/FTP 08-10-01 (AIX) Hitachi JP1/File Transmission Server/FTP 08-10 HP-UX(IPF) Hitachi JP1/File Transmission Server/FTP 08-10 (Solaris) Hitachi JP1/File Transmission Server/FTP 08-10 (Linux) Hitachi JP1/File Transmission Server/FTP 08-10 (Linux - IPF) Hitachi JP1/File Transmission Server/FTP 08-10 (HP-UX) Hitachi JP1/File Transmission Server/FTP 08-10 (AIX) Hitachi JP1/File Transmission Server/FTP 08-01-04 HP-UX(IPF) Hitachi JP1/File Transmission Server/FTP 08-01-04 (AIX) Hitachi JP1/File Transmission Server/FTP 08-01-03 (Solaris) Hitachi JP1/File Transmission Server/FTP 08-01-03 (Linux) Hitachi JP1/File Transmission Server/FTP 08-01-03 (Linux - IP Hitachi JP1/File Transmission Server/FTP 08-01-03 (HP-UX) Hitachi JP1/File Transmission Server/FTP 08-01-03 (HP-UX(IPF) Hitachi JP1/File Transmission Server/FTP 08-01-03 (AIX) Hitachi JP1/File Transmission Server/FTP 08-01-02 (Solaris) Hitachi JP1/File Transmission Server/FTP 08-01-02 (Linux) Hitachi JP1/File Transmission Server/FTP 08-01-02 (Linux(IPF) Hitachi JP1/File Transmission Server/FTP 08-01-02 (HP-UX) Hitachi JP1/File Transmission Server/FTP 08-01-02 (HP-UX(IPF) Hitachi JP1/File Transmission Server/FTP 08-01-02 (AIX) Hitachi JP1/File Transmission Server/FTP 08-01-01 (Solaris) Hitachi JP1/File Transmission Server/FTP 08-01-01 (Linux) Hitachi JP1/File Transmission Server/FTP 08-01-01 (Linux(IPF) Hitachi JP1/File Transmission Server/FTP 08-01-01 (HP-UX) Hitachi JP1/File Transmission Server/FTP 08-01-01 (HP-UX(IPF) Hitachi JP1/File Transmission Server/FTP 08-01-01 (AIX) Hitachi JP1/File Transmission Server/FTP 08-01 HP-UX(IPF) Hitachi JP1/File Transmission Server/FTP 08-01 (Solaris) Hitachi JP1/File Transmission Server/FTP 08-01 (Linux) Hitachi JP1/File Transmission Server/FTP 08-01 (Linux - IPF) Hitachi JP1/File Transmission Server/FTP 08-01 (HP-UX) Hitachi JP1/File Transmission Server/FTP 08-01 (AIX) Hitachi JP1/File Transmission Server/FTP 08-00-05 (HP-UX) Hitachi JP1/File Transmission Server/FTP 08-00-04 HP-UX(IPF) Hitachi JP1/File Transmission Server/FTP 08-00-04 (Solaris) Hitachi JP1/File Transmission Server/FTP 08-00-04 (Linux) Hitachi JP1/File Transmission Server/FTP 08-00-04 (Linux - IP Hitachi JP1/File Transmission Server/FTP 08-00-04 (HP-UX) Hitachi JP1/File Transmission Server/FTP 08-00-04 (AIX) Hitachi JP1/File Transmission Server/FTP 08-00-03 (Solaris) Hitachi JP1/File Transmission Server/FTP 08-00-03 (Linux) Hitachi JP1/File Transmission Server/FTP 08-00-03 (Linux(IPF) Hitachi JP1/File Transmission Server/FTP 08-00-03 (HP-UX) Hitachi JP1/File Transmission Server/FTP 08-00-03 (HP-UX(IPF) Hitachi JP1/File Transmission Server/FTP 08-00-03 (AIX) Hitachi JP1/File Transmission Server/FTP 08-00-02 (Solaris) Hitachi JP1/File Transmission Server/FTP 08-00-02 (Linux) Hitachi JP1/File Transmission Server/FTP 08-00-02 (Linux(IPF) Hitachi JP1/File Transmission Server/FTP 08-00-02 (HP-UX) Hitachi JP1/File Transmission Server/FTP 08-00-02 (HP-UX(IPF) Hitachi JP1/File Transmission Server/FTP 08-00-02 (AIX) Hitachi JP1/File Transmission Server/FTP 08-00-01 (Solaris) Hitachi JP1/File Transmission Server/FTP 08-00-01 (Linux) Hitachi JP1/File Transmission Server/FTP 08-00-01 (Linux(IPF) Hitachi JP1/File Transmission Server/FTP 08-00-01 (HP-UX) Hitachi JP1/File Transmission Server/FTP 08-00-01 (HP-UX(IPF) Hitachi JP1/File Transmission Server/FTP 08-00-01 (HP-UX - En Hitachi JP1/File Transmission Server/FTP 08-00-01 (AIX) Hitachi JP1/File Transmission Server/FTP 08-00 (Solaris) Hitachi JP1/File Transmission Server/FTP 08-00 (Linux) Hitachi JP1/File Transmission Server/FTP 08-00 (Linux - IPF) Hitachi JP1/File Transmission Server/FTP 08-00 (HP-UX) Hitachi JP1/File Transmission Server/FTP 08-00 (HP-UX - Engli Hitachi JP1/File Transmission Server/FTP 08-00 (AIX) Hitachi JP1/File Transmission Server/FTP 07-50-05 (AIX) Hitachi JP1/File Transmission Server/FTP 07-50-04 (AIX) Hitachi JP1/File Transmission Server/FTP 07-50-03 (Solaris) Hitachi JP1/File Transmission Server/FTP 07-50-03 (Linux) Hitachi JP1/File Transmission Server/FTP 07-50-03 (HP-UX) Hitachi JP1/File Transmission Server/FTP 07-50-03 (HP-UX(IPF) Hitachi JP1/File Transmission Server/FTP 07-50-03 (AIX) Hitachi JP1/File Transmission Server/FTP 07-50-02 HP-UX(IPF) Hitachi JP1/File Transmission Server/FTP 07-50-02 (Solaris) Hitachi JP1/File Transmission Server/FTP 07-50-02 (Linux) Hitachi JP1/File Transmission Server/FTP 07-50-02 (HP-UX) Hitachi JP1/File Transmission Server/FTP 07-50-02 (AIX) Hitachi JP1/File Transmission Server/FTP 07-50-01 (Solaris) Hitachi JP1/File Transmission Server/FTP 07-50-01 (Linux) Hitachi JP1/File Transmission Server/FTP 07-50-01 (HP-UX) Hitachi JP1/File Transmission Server/FTP 07-50-01 (HP-UX(IPF) Hitachi JP1/File Transmission Server/FTP 07-50-01 (AIX) Hitachi JP1/File Transmission Server/FTP 07-50 HP-UX(IPF) Hitachi JP1/File Transmission Server/FTP 07-50 (Solaris) Hitachi JP1/File Transmission Server/FTP 07-50 (Linux) Hitachi JP1/File Transmission Server/FTP 07-50 (HP-UX) Hitachi JP1/File Transmission Server/FTP 07-50 (HP-UX - Engli Hitachi JP1/File Transmission Server/FTP 07-50 (AIX) Hitachi JP1/File Transmission Server/FTP 07-20-/C (Linux(IPF) Hitachi JP1/File Transmission Server/FTP 07-20-/B (Linux - IP Hitachi JP1/File Transmission Server/FTP 07-20-/A (Linux(IPF) Hitachi JP1/File Transmission Server/FTP 07-20 (Linux - IPF) Hitachi JP1/File Transmission Server/FTP 07-11-/A (Linux) Hitachi JP1/File Transmission Server/FTP 07-11 (Linux) Hitachi JP1/File Transmission Server/FTP 07-10-/C (HP-UX) Hitachi JP1/File Transmission Server/FTP 07-10-/B HP-UX(IPF) Hitachi JP1/File Transmission Server/FTP 07-10-/B (HP-UX) Hitachi JP1/File Transmission Server/FTP 07-10-/B (AIX) Hitachi JP1/File Transmission Server/FTP 07-10-/A (Solaris) Hitachi JP1/File Transmission Server/FTP 07-10-/A (Linux) Hitachi JP1/File Transmission Server/FTP 07-10-/A (HP-UX) Hitachi JP1/File Transmission Server/FTP 07-10-/A (HP-UX(IPF) Hitachi JP1/File Transmission Server/FTP 07-10-/A (AIX) Hitachi JP1/File Transmission Server/FTP 07-10 HP-UX(IPF) Hitachi JP1/File Transmission Server/FTP 07-10 (Solaris) Hitachi JP1/File Transmission Server/FTP 07-10 (Linux) Hitachi JP1/File Transmission Server/FTP 07-10 (HP-UX) Hitachi JP1/File Transmission Server/FTP 07-10 (AIX) Hitachi JP1/File Transmission Server/FTP 07-00-/B (HP-UX) Hitachi JP1/File Transmission Server/FTP 07-00-/A HP-UX(IPF) Hitachi JP1/File Transmission Server/FTP 07-00-/A (Solaris) Hitachi JP1/File Transmission Server/FTP 07-00-/A (HP-UX) Hitachi JP1/File Transmission Server/FTP 07-00-/A (AIX) Hitachi JP1/File Transmission Server/FTP 07-00 HP-UX(IPF) Hitachi JP1/File Transmission Server/FTP 07-00 (Solaris) Hitachi JP1/File Transmission Server/FTP 07-00 (Linux) Hitachi JP1/File Transmission Server/FTP 07-00 (Linux - IPF) Hitachi JP1/File Transmission Server/FTP 07-00 (HP-UX) Hitachi JP1/File Transmission Server/FTP 07-00 (HP-UX - Engli Hitachi JP1/File Transmission Server/FTP 07-00 (AIX) Hitachi JP1/File Transmission Server/FTP 06-02-/H(*1) (AIX) Hitachi JP1/File Transmission Server/FTP 06-02-/G(*1) (HP-UX) Hitachi JP1/File Transmission Server/FTP 06-02-/G (AIX) Hitachi JP1/File Transmission Server/FTP 06-02-/F(*1) (Solari Hitachi JP1/File Transmission Server/FTP 06-02-/F (HP-UX) Hitachi JP1/File Transmission Server/FTP 06-02-/F (AIX) Hitachi JP1/File Transmission Server/FTP 06-02-/E (Solaris) Hitachi JP1/File Transmission Server/FTP 06-02-/E (HP-UX) Hitachi JP1/File Transmission Server/FTP 06-02-/E (AIX) Hitachi JP1/File Transmission Server/FTP 06-02-/D (Solaris) Hitachi JP1/File Transmission Server/FTP 06-02-/D (HP-UX) Hitachi JP1/File Transmission Server/FTP 06-02-/D (AIX) Hitachi JP1/File Transmission Server/FTP 06-02-/C (Solaris) Hitachi JP1/File Transmission Server/FTP 06-02-/C (HP-UX) Hitachi JP1/File Transmission Server/FTP 06-02-/C (AIX) Hitachi JP1/File Transmission Server/FTP 06-02-/B (Solaris) Hitachi JP1/File Transmission Server/FTP 06-02-/B (HP-UX) Hitachi JP1/File Transmission Server/FTP 06-02-/B (AIX) Hitachi JP1/File Transmission Server/FTP 06-02-/A (Solaris) Hitachi JP1/File Transmission Server/FTP 06-02-/A (HP-UX) Hitachi JP1/File Transmission Server/FTP 06-02-/A (AIX) Hitachi JP1/File Transmission Server/FTP 06-02 (Solaris) Hitachi JP1/File Transmission Server/FTP 06-02 (HP-UX) Hitachi JP1/File Transmission Server/FTP 06-02 (AIX) Hitachi JP1/File Transmission Server/FTP 06-01-/E(*1) (HP-UX) Hitachi JP1/File Transmission Server/FTP 06-01-/E (HP-UX) Hitachi JP1/File Transmission Server/FTP 06-01-/D (HP-UX) Hitachi JP1/File Transmission Server/FTP 06-01-/C(*1) (AIX) Hitachi JP1/File Transmission Server/FTP 06-01-/C (HP-UX) Hitachi JP1/File Transmission Server/FTP 06-01-/C (AIX) Hitachi JP1/File Transmission Server/FTP 06-01-/B (HP-UX) Hitachi JP1/File Transmission Server/FTP 06-01-/B (AIX) Hitachi JP1/File Transmission Server/FTP 06-01-/A (HP-UX) Hitachi JP1/File Transmission Server/FTP 06-01-/A (AIX) Hitachi JP1/File Transmission Server/FTP 06-01 (HP-UX) Hitachi JP1/File Transmission Server/FTP 06-01 (AIX) Hitachi JP1/File Transmission Server/FTP 06-00-/I(*1) (HP-UX) Hitachi JP1/File Transmission Server/FTP 06-00-/F(*1) (AIX) Hitachi JP1/File Transmission Server/FTP 06-00-/F (AIX) Hitachi JP1/File Transmission Server/FTP 06-00-/E (HI-UX/WE2) Hitachi JP1/File Transmission Server/FTP 06-00-/E (HI-UX/WE2) Hitachi JP1/File Transmission Server/FTP 06-00-/E (AIX) Hitachi JP1/File Transmission Server/FTP 06-00-/D (HI-UX/WE2) Hitachi JP1/File Transmission Server/FTP 06-00-/D (AIX) Hitachi JP1/File Transmission Server/FTP 06-00-/C(*1) (Solari Hitachi JP1/File Transmission Server/FTP 06-00-/C (Solaris) Hitachi JP1/File Transmission Server/FTP 06-00-/C (HI-UX/WE2) Hitachi JP1/File Transmission Server/FTP 06-00-/C (AIX) Hitachi JP1/File Transmission Server/FTP 06-00-/B (Solaris) Hitachi JP1/File Transmission Server/FTP 06-00-/B (HI-UX/WE2) Hitachi JP1/File Transmission Server/FTP 06-00-/B (AIX) Hitachi JP1/File Transmission Server/FTP 06-00-/A (Solaris) Hitachi JP1/File Transmission Server/FTP 06-00-/A (HI-UX/WE2) Hitachi JP1/File Transmission Server/FTP 06-00-/A (AIX) Hitachi JP1/File Transmission Server/FTP 06-00-/A (AIX) Hitachi JP1/File Transmission Server/FTP 06-00 (Solaris) Hitachi JP1/File Transmission Server/FTP 06-00 (HP-UX) Hitachi JP1/File Transmission Server/FTP 06-00 (HP-UX - Engli Hitachi JP1/File Transmission Server/FTP 06-00 (HP-UX - Engli Hitachi JP1/File Transmission Server/FTP 06-00 (HI-UX/WE2) Hitachi JP1/File Transmission Server/FTP 06-00 (AIX) Hitachi JP1/File Transmission Server/FTP 05-10-/H(*1) (HP-UX) Hitachi JP1/File Transmission Server/FTP 05-10-/H (HP-UX) Hitachi JP1/File Transmission Server/FTP 05-10-/G (HP-UX) Hitachi JP1/File Transmission Server/FTP 05-10-/F (HP-UX) Hitachi JP1/File Transmission Server/FTP 05-10-/E (HP-UX) Hitachi JP1/File Transmission Server/FTP 05-10-/D (HP-UX) Hitachi JP1/File Transmission Server/FTP 05-10-/C (HP-UX) Hitachi JP1/File Transmission Server/FTP 05-10-/C (HI-UX/WE2) Hitachi JP1/File Transmission Server/FTP 05-10-/B (HP-UX) Hitachi JP1/File Transmission Server/FTP 05-10-/B (HI-UX/WE2) Hitachi JP1/File Transmission Server/FTP 05-10-/A (HP-UX) Hitachi JP1/File Transmission Server/FTP 05-10-/A (HI-UX/WE2) Hitachi JP1/File Transmission Server/FTP 05-10 (HP-UX) Hitachi JP1/File Transmission Server/FTP 05-10 (HI-UX/WE2) Hitachi JP1/File Transmission Server/FTP 05-00(*1) (HP-UX) Hitachi JP1/File Transmission Server/FTP 05-00 (HP-UX) Hitachi JP1/File Transmission Server/FTP 01-00-/A(*1) (HP-UX) Hitachi JP1/File Transmission Server/FTP 01-00 (HP-UX)
Not Vulnerable:	Hitachi JP1/File Transmission Server/FTP (Solaris) 07-50-04 Hitachi JP1/File Transmission Server/FTP (Linux) 08-50-01 Hitachi JP1/File Transmission Server/FTP (Linux) 07-50-04 Hitachi JP1/File Transmission Server/FTP (HP-UX) 08-50-01 Hitachi JP1/File Transmission Server/FTP (HP-UX) 07-50-04 Hitachi JP1/File Transmission Server/FTP (HP-UX(IPF)) 07-50-04 Hitachi JP1/File Transmission Server/FTP (AIX) 08-50-01 Hitachi JP1/File Transmission Server/FTP (AIX) 07-50-06 Hitachi JP1/File Transmission Server/FTP 08-50-01 (Solaris)

Hitachi JP1/File Transmission Server/FTP File Modfication Unauthorized Access Vulnerability

Hitachi JP1/File Transmission Server/FTP is prone to a vulnerability that may allow attackers to modify file permissions.

An attacker can exploit this issue to gain unauthorized access to files located on the FTP server. This may lead to other attacks.

Hitachi JP1/File Transmission Server/FTP File Modfication Unauthorized Access Vulnerability

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Hitachi JP1/File Transmission Server/FTP File Modfication Unauthorized Access Vulnerability

Solution:
The vendor released an advisory and fixes to address this issue. Please see the references for more information.

Hitachi JP1/File Transmission Server/FTP File Modfication Unauthorized Access Vulnerability

References:

• Hitachi Device Manager Homepage ( Hitachi)
  
• Problem Allowing Illegal Modification of File Permissions in JP1/File Transmissi (Hitachi)