Sign-up

ID

VAR-201211-0608


TITLE

Multiple Vulnerabilities in Hitachi JP1/File Transmission Server/FTP

Trust: 0.8

sources: JVNDB: JVNDB-2012-005201

DESCRIPTION

Hitachi JP1/File Transmission Server/FTP contains multiple vulnerabilities. * FTP Bounce Attack in PASV mode * Buffer overflow at file transmission * Defect of the account information check in user authenticationA remote attacker could access arbitrary files in system.

Trust: 0.8

sources: JVNDB: JVNDB-2012-005201

AFFECTED PRODUCTS

vendor:hitachimodel:jp1/file transmission server/ftpscope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2012-005201

CVSS

SEVERITY

CVSSV2

CVSSV3

VENDOR: JVNDB-2012-005201
value: HIGH

Trust: 0.8

VENDOR: JVNDB-2012-005201
severity: HIGH
baseScore: 9.0
vectorString: AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.8

sources: JVNDB: JVNDB-2012-005201

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2012-005201

PATCH
title:HS12-022url:http://www.hitachi.co.jp/prod/comp/soft1/global/security/info/vuls/hs12-022/index.html
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2012-005201

EXTERNAL IDS
db:JVNDBid:JVNDB-2012-005201
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2012-005201

SOURCES
db:JVNDBid:JVNDB-2012-005201

LAST UPDATE DATE
2022-05-04T09:05:47.893000+00:00

SOURCES UPDATE DATE
db:JVNDBid:JVNDB-2012-005201date:2012-11-26T00:00:00

SOURCES RELEASE DATE
db:JVNDBid:JVNDB-2012-005201date:2012-11-05T00:00:00