RETIRED: Hitachi Multple Products Arbitrary Memory Read Information Disclosure Vulnerability

Bugtraq ID:	35792
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 24 2009 12:00AM
Updated:	Jul 24 2009 07:16PM
Credit:	The vendor
Vulnerable:	Hitachi uCosminexus Application Server Standard 6.7 Hitachi uCosminexus Application Server Enterprise 6.7 Hitachi Processing Kit for XML 0 Hitachi Developer's Kit for Java 0 Hitachi Cosminexus Application Server Standard 6 Hitachi Cosminexus Application Server Enterprise 6 Hitachi Cosminexus Application Server 5
Not Vulnerable:

RETIRED: Hitachi Multple Products Arbitrary Memory Read Information Disclosure Vulnerability

Hitachi Cosminexus, Processing Kit for XML, and Hitachi Developer's Kit for Java are prone to an information-disclosure vulnerability.

An attacker can exploit this issue to gain read access to arbitrary memory locations. Information obtained may aid in other attacks.

NOTE: This BID is being retired because it is a duplicate of the issue discussed in BID 35589.

RETIRED: Hitachi Multple Products Arbitrary Memory Read Information Disclosure Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RETIRED: Hitachi Multple Products Arbitrary Memory Read Information Disclosure Vulnerability

Solution:
The vendor has released an advisory and fixes. Please see the references for more information.

RETIRED: Hitachi Multple Products Arbitrary Memory Read Information Disclosure Vulnerability

References:

• Hitachi Device Manager Homepage ( Hitachi)
  
• HS09-008 Vulnerability in reading arbitrary memory locations by using a parsing (Hitachi)