Hitachi Web Server Client SSL Certificate Handling Unspecified Vulnerability

Bugtraq ID:	35665
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jun 04 2009 12:00AM
Updated:	Jul 24 2009 06:36PM
Credit:	Hitachi
Vulnerable:	Hitachi Web Server 0 Hitachi uCosminexus Service Platform 0 Hitachi uCosminexus Service Architect 0 Hitachi uCosminexus Developer Standard 0 Hitachi uCosminexus Developer Professional 0 Hitachi uCosminexus Developer Light 0 Hitachi uCosminexus Application Server Standard 0 Hitachi uCosminexus Application Server Enterprise 09-80 (Windows(x64)) Hitachi Cosminexus Server - Web Edition 4 Hitachi Cosminexus Server - Standard Edition 4 Hitachi Cosminexus Developer Standard 6 Hitachi Cosminexus Developer Professional 6 Hitachi Cosminexus Developer Light 6 Hitachi Cosminexus Developer 5 Hitachi Cosminexus Application Server Standard 6 Hitachi Cosminexus Application Server Enterprise 6 Hitachi Cosminexus Application Server 5.0
Not Vulnerable:

Hitachi Web Server Client SSL Certificate Handling Unspecified Vulnerability

Hitachi Web Server is prone to an unspecified vulnerability when handling client SSL certificates.

Attackers may exploit this issue to manipulate certain environment variables and potentially gain unauthorized access to the vulnerable server.

Hitachi Web Server Client SSL Certificate Handling Unspecified Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Hitachi Web Server Client SSL Certificate Handling Unspecified Vulnerability

Solution:
Updates are available. Please see the references for details.

Hitachi Web Server Client SSL Certificate Handling Unspecified Vulnerability

References:

• Hitachi Device Manager Homepage ( Hitachi)
  
• HS09-010 (Hitachi)
  
• JVNDB-2009-001741 (JVNDB)