JVNDB-2012-005201

[Japanese]
JVNDB-2012-005201
Multiple Vulnerabilities in Hitachi JP1/File Transmission Server/FTP
Overview
Hitachi JP1/File Transmission Server/FTP contains multiple vulnerabilities. * FTP Bounce Attack in PASV mode * Buffer overflow at file transmission * Defect of the account information check in user authentication
CVSS Severity (What is CVSS?)
CVSS V2 Severity: Base Metrics 9.0 (High) [Vendor Score] Access Vector: Network Access Complexity: Low Authentication: Single Instance Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
Affected Products

Hitachi, Ltd JP1/File Transmission Server/FTP
Please refer to the vendor information for detailed version information.
Impact
A remote attacker could access arbitrary files in system.
Solution
Please refer to the 'Vendor Information' section for the official countermeasure and take appropriate action.
Vendor Information
Hitachi, Ltd Hitachi Software Vulnerability Information : HS12-022
CWE (What is CWE?)
No Mapping(CWE-noinfo) [IPA Evaluation]
CVE (What is CVE?)

References

Revision History
[2012/11/05] Web page was published [2012/11/26] CVSS Severity was modified

Multiple Vulnerabilities in Hitachi JP1/File Transmission Server/FTP