5

CVE-2007-5810

Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote attackers to spoof authentication via a client certificate with a forged signature.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hitachi ≫ Cosminexus Server Version <= 04_01
Hitachi ≫ Ucosminexus Developer Light Version <= 06_71_d
Hitachi ≫ Ucosminexus Developer Standard Version <= 07_50_01
Hitachi ≫ Ucosminexus Service Architect Version <= 07_50_01
Hitachi ≫ Ucosminexus Service Platform Version <= 07_50_01
Hitachi ≫ Web Server Version 01_00 Edition hpux
Hitachi ≫ Web Server Version 01_00 Edition solaris
Hitachi ≫ Web Server Version 01_01 Edition aix
Hitachi ≫ Web Server Version 01_01 Edition linux
Hitachi ≫ Web Server Version 01_01 Edition turbolinux
Hitachi ≫ Web Server Version 01_01_d Edition linux
Hitachi ≫ Web Server Version 01_02_d Edition hpux
Hitachi ≫ Web Server Version 01_02_d Edition solaris
Hitachi ≫ Web Server Version 01_02_e Edition aix
Hitachi ≫ Web Server Version 02_00 Edition aix
Hitachi ≫ Web Server Version 02_00 Edition hpux
Hitachi ≫ Web Server Version 02_00 Edition linux
Hitachi ≫ Web Server Version 02_00 Edition solaris
Hitachi ≫ Web Server Version 02_00 Edition turbolinux
Hitachi ≫ Web Server Version 02_00 Edition windows
Hitachi ≫ Web Server Version 02_00_a Edition linux
Hitachi ≫ Web Server Version 02_02 Edition hpux
Hitachi ≫ Web Server Version 02_02 Edition linux
Hitachi ≫ Web Server Version 02_04_b Edition aix
Hitachi ≫ Web Server Version 02_04_b Edition hpux
Hitachi ≫ Web Server Version 02_04_b Edition solaris
Hitachi ≫ Web Server Version 02_04_b Edition windows
Hitachi ≫ Web Server Version 02_06_a Edition linux
Hitachi ≫ Web Server Version 03_00 Edition aix
Hitachi ≫ Web Server Version 03_00 Edition linux
Hitachi ≫ Web Server Version 03_00 Edition windows
Hitachi ≫ Web Server Version 03_00_01 Edition solaris
Hitachi ≫ Web Server Version 03_00_01 Edition windows
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.78% 0.511
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://secunia.com/advisories/27421
Patch
Vendor Advisory
http://www.securityfocus.com/bid/26271
http://www.vupen.com/english/advisories/2007/3666
http://osvdb.org/42026
http://www.hitachi-support.com/security_e/vuls_e/HS07-034_e/index-e.html
Patch