日立 Cosminexus, 日立 Developer's Kit, 日立 Processing Kit, 日立 uCosminexus

ソフト名：日立 Cosminexus 6.x/7.x/8.x/Studio 4.x, 日立 Developer's Kit for Java, 日立 Processing Kit for XML, 日立 uCosminexus Application Server/Client/Developer/Operator/Portal Framework/Service Architect/Service Platform (Sun JAVA)

回避策：HS11-015にて対応

脆弱性：データ操作, 機密情報の奪取, DoS攻撃, システムアクセス, 整数オーバーフローエラー, メモリ破壊, リモートコード実行, 解放後使用エラー, リモートコマンド実行

ソース：http://www.hitachi.co.jp/Prod/comp/soft1/global/prod/cosminexus/index.html

http://www.hitachi.co.jp/

http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS11-015/index.html

http://secunia.com/advisories/44784/

http://secunia.com/advisories/45245/

http://dvw-j.blogspot.com/2011/06/sun-java-red-hat-enterprise-linux-red.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0802

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0814

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0815

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0862

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0864

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0865

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0866

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0867

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0868

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0869

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0871

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0872

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0873

CVE：CVE-2011-0802, CVE-2011-0814, CVE-2011-0815, CVE-2011-0862, CVE-2011-0864, CVE-2011-0865, CVE-2011-0866, CVE-2011-0867, CVE-2011-0868, CVE-2011-0869, CVE-2011-0871, CVE-2011-0872, CVE-2011-0873

危険性：High Risk