Hitachi HiRDB Control Manager Agent Remote Command Execution Vulnerability

Release date:
Updated on:

Affected Systems:
Hitachi HiRDB Control Manager-Agent 08-03
Hitachi HiRDB Control Manager-Agent 08-02 (* 1)
Hitachi HiRDB Control Manager-Agent 02-00
Hitachi HiRDB Control Manager-Agent 01-00
Unaffected system:
Hitachi HiRDB Control Manager-Agent 08-03-01 2011.06.03
Description:
--------------------------------------------------------------------------------
Bugtraq id: 48625

HiRDB is an efficient database management system.

The HiRDB Control Manager Agent has a running command execution vulnerability. Remote attackers can exploit this vulnerability to execute arbitrary commands.

This vulnerability is caused by unspecified errors in the Control Manager Agent when processing certain requests.

<* Source: Hitachi

Link: http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-012/index.html
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Hitachi
-------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.hitachi.co.jp