Hitachi Web Server with SSL Enabled Remote Denial of Service Vulnerability

Bugtraq ID:	40223
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	May 18 2010 12:00AM
Updated:	Jul 12 2010 06:47PM
Credit:	Hitachi
Vulnerable:	Hitachi Web Server - Security Enhancement 0 Hitachi Web Server 02-04-/B (Solaris) Hitachi Web Server 02-04-/B (Linux(IPF) Hitachi Web Server 02-04-/B (HP-UX) Hitachi Web Server 02-04-/B (HP-UX IPF) Hitachi Web Server 02-04-/B (HP-UX 11.0 Hitachi Web Server 02-04-/B (AIX) Hitachi Web Server 02-04-/A(*2)(Windows Hitachi Web Server 02-04-/A (Windows IP Hitachi Web Server 02-03 (Windows IPF) Hitachi Web Server 02-02 (Linux) Hitachi Web Server 02-02 (Linux IPF) Hitachi Web Server 02-02 (HP-UX IPF) Hitachi Web Server 02-00/A(1*) (Linux) Hitachi Web Server 02-00-/A (Linux) Hitachi Web Server 02-00 (Windows) Hitachi Web Server 02-00 (Turbolinux) Hitachi Web Server 02-00 (Solaris) Hitachi Web Server 02-00 (Linux) Hitachi Web Server 02-00 (Linux AP8000) Hitachi Web Server 02-00 (HP-UX) Hitachi Web Server 02-00 (HP-UX 11.0) Hitachi Web Server 02-00 (AIX) Hitachi Web Server 01-02-/E(*1) (AIX) Hitachi Web Server 01-02-/E (AIX) Hitachi Web Server 01-02-/D(1*) (Solari Hitachi Web Server 01-02-/D(*1)(HP-UX 1 Hitachi Web Server 01-02-/D(*1) (HP-UX Hitachi Web Server 01-02-/D (Solaris) Hitachi Web Server 01-02-/D (HP-UX) Hitachi Web Server 01-02 (AIX) Hitachi Web Server 01-01-/D(1*) (Linux) Hitachi Web Server 01-01-/D (Linux) Hitachi Web Server 01-01(*2) (Linux for Hitachi Web Server 01-01 (Turbolinux) Hitachi Web Server 01-01 (Linux) Hitachi Web Server 01-01 (Linux MP) Hitachi Web Server 01-01 (AIX) Hitachi Web Server 01-00 (Solaris) Hitachi Web Server 01-00 (HP-UX) Hitachi Web Server 01-00 (HP-UX 11.0) Hitachi Web Server 01-00 (HP-UX 10.20) Hitachi Web Server 0 Hitachi Hitachi Web Server - Security Enhancement 02-04-/B (Hitachi) Hitachi Hitachi Web Server 02-05 (Linux) Hitachi Hitachi Web Server 02-04-/C (Windows) Hitachi Hitachi Web Server 02-04-/B (Windows) Hitachi Hitachi Web Server 02-04-/B (Linux(IPF) Hitachi Hitachi Web Server 02-04-/A (Windows) Hitachi Hitachi Web Server 02-04-/A (Windows(IP Hitachi Hitachi Web Server 02-04-/A (Solaris) Hitachi Hitachi Web Server 02-04-/A (Linux IPF) Hitachi Hitachi Web Server 02-04-/A (HP-UX) Hitachi Hitachi Web Server 02-04-/A (AIX) Hitachi Hitachi Web Server 02-04 (Windows) Hitachi Hitachi Web Server 02-04 (Linux) Hitachi Hitachi Web Server 02-04 (HP-UX(IPF)) Hitachi Hitachi Web Server 02-03 (Windows) Hitachi Hitachi Web Server 02-03 (Solaris) Hitachi Hitachi Web Server 02-03 (Linux) Hitachi Hitachi Web Server 02-03 (Linux IPF) Hitachi Hitachi Web Server 02-03 (HP-UX) Hitachi Hitachi Web Server 02-03 (HP-UX(IPF)) Hitachi Hitachi Web Server 02-03 (AIX) Hitachi Hitachi Web Server 02-02 (Windows) Hitachi Hitachi Web Server 02-02 (Solaris) Hitachi Hitachi Web Server 02-02 (HP-UX) Hitachi Hitachi Web Server 02-02 (AIX) Hitachi Hitachi Web Server 02-01 (Windows) Hitachi Hitachi Web Server 02-01 (Solaris) Hitachi Hitachi Web Server 02-01 (HP-UX) Hitachi Hitachi Web Server 02-01 (AIX) Hitachi Hitachi Web Server 01-02-/D (AIX) Hitachi Hitachi Web Server 01-02-/C (Solaris) Hitachi Hitachi Web Server 01-02-/C (HP-UX) Hitachi Hitachi Web Server 01-02-/C (AIX) Hitachi Hitachi Web Server 01-02-/B (Solaris) Hitachi Hitachi Web Server 01-02-/B (HP-UX) Hitachi Hitachi Web Server 01-02-/B (AIX) Hitachi Hitachi Web Server 01-02-/A (Solaris) Hitachi Hitachi Web Server 01-02-/A (HP-UX) Hitachi Hitachi Web Server 01-02-/A (AIX) Hitachi Hitachi Web Server 01-02 (Solaris) Hitachi Hitachi Web Server 01-02 (HP-UX)
Not Vulnerable:	Hitachi Web Server 02-06-/F (Linux) Hitachi Web Server 02-04-/F (Windows) Hitachi Web Server 02-04-/F (Solaris) Hitachi Web Server 02-04-/F (HP-UX) Hitachi Web Server 02-04-/F (HP-UX IPF) Hitachi Web Server 02-04-/F (AIX)

Hitachi Web Server with SSL Enabled Remote Denial of Service Vulnerability

Hitachi Web Server is prone to a denial-of-service vulnerability when it is configured to use Secure Sockets Layer (SSL).

Attackers can exploit this issue to cause denial-of-service conditions by sending malformed packets to an affected server.

Hitachi Web Server with SSL Enabled Remote Denial of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Hitachi Web Server with SSL Enabled Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for details.

Hitachi Web Server with SSL Enabled Remote Denial of Service Vulnerability

References:

• Hitachi Device Manager Homepage ( Hitachi)
  
• HS10-008 (Hitachi)
  
• HS10-008 A vulnerability to denial-of-service (DoS) attacks was found in the Hit (Hitachi)