Hitachi Web Server Reverse Proxy Remote Denial of Service Vulnerability

Bugtraq ID:	35663
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jul 10 2009 12:00AM
Updated:	Jul 12 2010 06:47PM
Credit:	Hitachi
Vulnerable:	Hitachi Web Server 0 Hitachi uCosminexus Service Platform 8 Hitachi uCosminexus Service Platform 7 Hitachi uCosminexus Service Platform 0 Hitachi uCosminexus Service Architect 8 Hitachi uCosminexus Service Architect 7 Hitachi uCosminexus Service Architect 0 Hitachi uCosminexus Developer Standard 8 Hitachi uCosminexus Developer Standard 7 Hitachi uCosminexus Developer Standard 0 Hitachi uCosminexus Developer Professional 8 Hitachi uCosminexus Developer Professional 7 Hitachi uCosminexus Developer Professional 0 Hitachi uCosminexus Application Server Standard 8 Hitachi uCosminexus Application Server Standard 7 Hitachi uCosminexus Application Server Standard 0 Hitachi uCosminexus Application Server Enterprise 8 Hitachi uCosminexus Application Server Enterprise 7 Hitachi uCosminexus Application Server Enterprise 09-80 (Windows(x64))
Not Vulnerable:	Hitachi Web Server 03-00-05 (HP-UX) Hitachi Web Server 03-00-05 (AIX)

Hitachi Web Server Reverse Proxy Remote Denial of Service Vulnerability

Hitachi Web Server is prone to a denial-of-service vulnerability because the reverse proxy function fails to properly handle invalid responses from a remote backend server.

Attackers may exploit this issue to cause denial-of-service conditions.

Hitachi Web Server Reverse Proxy Remote Denial of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Hitachi Web Server Reverse Proxy Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for details.

Hitachi Web Server Reverse Proxy Remote Denial of Service Vulnerability

References:

• Hitachi Device Manager Homepage ( Hitachi)
  
• HS09-009 (Hitachi)
  
• JVNDB-2009-001740 (JVNDB)