日立 Cosminexus, 日立 uCosminexus

ソフト名：日立 Cosminexus 8.x, 日立 uCosminexus Application Server/Client/Developer/Operator/Service Architect/Service Platform

回避策：あり

脆弱性：DoS攻撃, 不特定のエラー

ソース：

http://www.hitachi.co.jp/Prod/comp/soft1/global/prod/cosminexus/index.html

http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS11-018/index.html

http://secunia.com/advisories/45863/

危険性：Medium Risk

日立 Cosminexus, 日立 Developer's Kit, 日立 Processing Kit, 日立 uCosminexus

ソフト名：日立 Cosminexus 6.x/7.x/8.x/Studio 4.x, 日立 Developer's Kit for Java, 日立 Processing Kit for XML, 日立 uCosminexus Application Server/Client/Developer/Operator/Portal Framework/Service Architect/Service Platform (Sun JAVA)

回避策：HS11-015にて対応

脆弱性：データ操作, 機密情報の奪取, DoS攻撃, システムアクセス, 整数オーバーフローエラー, メモリ破壊, リモートコード実行, 解放後使用エラー, リモートコマンド実行

ソース：http://www.hitachi.co.jp/Prod/comp/soft1/global/prod/cosminexus/index.html

http://www.hitachi.co.jp/

http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS11-015/index.html

http://secunia.com/advisories/44784/

http://secunia.com/advisories/45245/

http://dvw-j.blogspot.com/2011/06/sun-java-red-hat-enterprise-linux-red.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0802

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0814

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0815

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0862

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0864

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0865

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0866

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0867

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0868

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0869

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0871

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0872

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0873

CVE：CVE-2011-0802, CVE-2011-0814, CVE-2011-0815, CVE-2011-0862, CVE-2011-0864, CVE-2011-0865, CVE-2011-0866, CVE-2011-0867, CVE-2011-0868, CVE-2011-0869, CVE-2011-0871, CVE-2011-0872, CVE-2011-0873

危険性：High Risk

日立 Cosminexus, 日立 Developer's Kit, 日立 uCosminexus Application, Novell openSUSE

ソフト名：日立 Cosminexus 5.x/6.x/7.x/8.x/Application Server 6.x/Server 4.x/Studio 4.x, 日立 Developer's Kit for Java, 日立 uCosminexus Application Server/Client/Developer/Operator/Portal Framework/Service Architect/Service Platform, Novell openSUSE 11.2/11.3
回避策：HS11-003にて対応, openSUSE-SU-2011:0155-1にて対応
脆弱性：データ操作, 機密情報の奪取, DoS攻撃, システムアクセス, 無限ループ, 入力検証エラー, リモートコード実行, ヒープメモリ破壊
ソース：http://www.hitachi.co.jp/Prod/comp/soft1/global/prod/products.html#Cosminexus
http://www.opensuse.org/en/
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-003/index.html
http://www.hitachi.co.jp/Prod/comp/soft1/security/info/./vuls/HS11-003/index.html
https://hermes.opensuse.org/messages/7533009
http://secunia.com/advisories/43262/
http://secunia.com/advisories/43624/
http://secunia.com/advisories/43627/
http://dvw-j.blogspot.com/2011/02/sun-java-ibm-java-ibm-websphere.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4448
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4450
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4454
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4462
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4465
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4468
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4469
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4470
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4471
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4472
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4473
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4476
CVE：CVE-2010-4448, CVE-2010-4450, CVE-2010-4454, CVE-2010-4462, CVE-2010-4465, CVE-2010-4468, CVE-2010-4469, CVE-2010-4470, CVE-2010-4471, CVE-2010-4472, CVE-2010-4473, CVE-2010-4476
危険性：High Risk

日立 uCosminexus製品

ソフト名：日立 uCosminexus Application Server 6～8 Standard/Enterprise, Hitachi uCosminexus Client 7/8, Hitachi uCosminexus Developer 7/8 Standard/Professional, Hitachi uCosminexus Operator 7/8, Hitachi uCosminexus Service Architect 7/8, Hitachi uCosminexus Service Platform 7/8
回避策：HS10-010にて対応
脆弱性：リモートコード実行, データ操作
ソース：http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS10-010/index.html
http://secunia.com/advisories/40765
危険性：High Risk