Attachmate Reflection X, Attachmate Reflection

ソフト名：Attachmate Reflection X 2011, Attachmate Reflection for Secure IT 7.2 SP1未満/for X 2011

回避策：未対応, アップデートにて対応

脆弱性：セキュリティ制限の回避, DoS攻撃, システムアクセス, 不正ライブラリのロード, リモートコード実行, 無限ループ

ソース：http://www.attachmate.com/Products/mft/Security/security.htm

http://www.attachmate.com/Evals/rsx2011/portal.htm

http://support.attachmate.com/techdocs/2560.html

http://support.attachmate.com/techdocs/2564.html

http://support.attachmate.com/techdocs/2565.html

http://support.attachmate.com/techdocs/2566.html

http://secunia.com/advisories/36093/

http://secunia.com/advisories/40983/

http://secunia.com/advisories/43262/

http://secunia.com/advisories/44905/

http://secunia.com/advisories/44906/

http://dvw-j.blogspot.com/2011/02/sun-java-ibm-java-ibm-websphere.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2408

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3190

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4476

CVE：CVE-2009-2408, CVE-2010-3190, CVE-2010-4476

危険性：High Risk