JVNDB-2010-001518

TP1/Message Control Denial of Service (DoS) Vulnerability

The port used by TP1/Message Control's mapping service has a vulnerability where the port is forced to keep collecting debug information when it receives a maliciously-crafted message, which in turn causes the depletion of the disk resource and leads to a denial of service (DoS) condition.

Base Metrics: 5.0 (Medium) [IPA Score]

• Access Vector: Network
• Access Complexity: Low
• Authentication: None
• Confidentiality Impact: None
• Integrity Impact: None
• Availability Impact: Partial

Hitachi, Ltd

• TP1/Message Control
• uCosminexus TP1/Message Control

A remote attacker could cause a denial of service (DoS) condition on the affected system.

Please refer to the 'Vendor Information' section for the official countermeasure and take appropriate action.

Hitachi, Ltd

• Hitachi Software Vulnerability Information : HS10-007

1. Improper Input Validation(CWE-20) [IPA Evaluation]

[2010/6/22]
  Web page published