ESB-2017.2191 - [Win][Linux][HP-UX][Solaris][AIX] Hitachi products: Denial of service - Unknown/unspecified 2017-09-01

Printable version
PGP/GPG verifiable version

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

===========================================================================
             AUSCERT External Security Bulletin Redistribution

                               ESB-2017.2191
        DoS Vulnerability in JP1 and Hitachi IT Operations Director
                             1 September 2017

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:           Job Management Partner 1
                   Hitachi IT Operations Director
Publisher:         Hitachi
Operating System:  Windows
                   Linux variants
                   AIX
                   Solaris
                   HP-UX
Impact/Access:     Denial of Service -- Unknown/Unspecified
Resolution:        Patch/Upgrade

Original Bulletin: 
   http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-122/index.html

- --------------------------BEGIN INCLUDED TEXT--------------------

DoS Vulnerability in JP1 and Hitachi IT Operations Director

Update: September 1, 2017

A vulnerability to denial-of-service attacks was found in JP1 and Hitachi IT 
Operations Director.

Security Information ID

hitachi-sec-2017-122

Vulnerability description

A vulnerability to denial-of-service attacks was found in JP1 and Hitachi IT 
Operations Director.

Affected products and versions are listed below. Please upgrade your version 
to the appropriate version.

Affected products

The information is organized under the following headings:

(Example)

Product name: Gives the name of the affected product.

Version:

Platform

Gives the affected version.

- - JP1 Automation

Product name: JP1/Automatic Job Management System 3 - Manager

Version(s):

Windows

09-00 to 11-10

Linux

09-00 to 11-10

AIX

09-00 to 11-10

Solaris

09-00 to 11-10

HP-UX

09-00 to 11-10

Product name: Job Management Partner 1/Automatic Job Management System 3 - 
Manager

Version(s):

Windows(Multi-language version)

10-00 to 10-50

Linux(Multi-language version)

10-00 to 10-50

AIX(Multi-language version)

10-00 to 10-50

Solaris(Multi-language version)

10-00 to 10-50

HP-UX(Multi-language version)

10-00 to 10-50

Windows(English version)

09-00

AIX(English version)

09-00

Solaris(English version)

09-00

HP-UX(English version)

09-00

Product name: JP1/Automatic Job Management System 2 - Manager(*1)

Version(s):

Windows

08-00 to 08-50

Linux

08-00 to 08-50

AIX

08-00 to 08-50

Solaris

08-00 to 08-50

HP-UX

08-00 to 08-50

Product name: Job Management Partner 1/Automatic Job Management System 2 - 
Manager(*1)

Version(s):

Windows(English version)

08-00

Windows(Chinese version)

08-00

AIX(English version)

08-00

Solaris(English version)

08-00

HP-UX(English version)

08-00

Product name: JP1/Automatic Job Management System 2 - Advanced Manager(*1)

Version(s):

Windows

07-00 to 07-50

Linux

07-10 to 07-50

AIX

07-00 to 07-50

Solaris

07-00 to 07-50

HP-UX

07-00 to 07-50

Product name: Job Management Partner 1/Automatic Job Management System 2 - 
Advanced Manager(*1)

Version(s):

Windows(English version)

07-00

AIX(English version)

07-00

Solaris(English version)

07-00

HP-UX(English version)

07-00

Product name: JP1/Automatic Operation

Version(s):

Windows

10-00 to 11-00

Linux

10-00 to 11-00

- - JP1 Monitoring

Product name: JP1/Integrated Management - Manager

Version(s):

Windows

09-00 to 11-10

Linux

09-00 to 11-10

AIX

09-00 to 11-10

Solaris

09-00 to 10-50

HP-UX

09-00 to 10-50

Product name: Job Management Partner 1/Integrated Management - Manager(*1)

Version(s):

Windows(Multi-language version)

10-00 to 10-50

Linux(Multi-language version)

10-00 to 10-50

AIX(Multi-language version)

10-00 to 10-50

Solaris(Multi-language version)

10-00 to 10-50

Windows(English version)

09-00

AIX(English version)

09-00

Solaris(English version)

09-00

Product name: JP1/Service Support

Product name: JP1/Service Support Starter Edition

Version(s):

Windows

11-00 to 11-10

Product name: JP1/Integrated Management - Service Support

Version(s):

Windows

09-00 to 10-50

Product name: Job Management Partner 1/Integrated Management - Service 
Support(*1)

Version(s):

Windows(Multi-language version)

10-10 to 10-50

Product name: JP1/Integrated Management - Service Support Starter Edition

Version(s):

Windows

10-10 to 10-50

Product name: JP1/Integrated Management - Service Support Advanced Edition

Version(s):

Windows

10-50

Product name: Job Management Partner 1/Integrated Management - Service Support
Advanced Edition(*1)

Version(s):

Windows(Multi-language version)

10-50

Product name: JP1/Integrated Manager - Incident Master(*2)

Version(s):

Windows

07-51 to 08-01

Product name: JP1/Service Level Management - Manager

Version(s):

Windows

11-00

Product name: JP1/IT Service Level Management - Manager(*1)

Version(s):

Windows

10-00 to 10-51

Product name: Job Management Partner 1/IT Service Level Management - 
Manager(*1)

Version(s):

Windows(Multi-language version)

10-00 to 10-50

Product name: JP1/Operation Analytics

Version(s):

Windows

11-00 to 11-10

Product name: JP1/Performance Management - Analysis Manager(*2)

Version(s):

Windows

08-00 to 08-10

Product name: JP1/Performance Analysis - Manager(*2)

Version(s):

Windows

07-00 to 07-10

Product name: JP1/ServerConductor/Control Manager(*2)

Version(s):

Windows

07-50 to 08-60

- - JP1 Compliance

Product name: JP1/IT Desktop Management 2 - Manager

Version(s):

Windows

10-50 to 11-10

Product name: JP1/IT Desktop Management 2 - Operations Director

Version(s):

Windows

11-01 to 11-10

Product name: Job Management Partner 1/IT Desktop Management 2 - Manager

Version(s):

Windows(Multi-language version)

10-50

Product name: JP1/IT Desktop Management 2 - Smart Device Manager

Version(s):

Windows

10-50 to 11-10

Product name: Job Management Partner 1/IT Desktop Management 2 - Smart Device
Manager(*1)

Version(s):

Windows(Multi-language version)

10-50

Product name: JP1/IT Desktop Management - Manager(*1)

Version(s):

Windows

09-50 to 10-10

Product name: Job Management Partner 1/IT Desktop Management - Manager(*1)

Version(s):

Windows(Multi-language version)

09-50 to 10-10

Product name: JP1/NETM/DM Manager

Version(s):

Windows

08-00 to 10-10

Product name: JP1/NETM/DM Manager Embedded RDB Edition(*1)

Version(s):

Windows

07-50 to 07-53

Product name: Job Management Partner 1/Software Distribution Manager

Version(s):

Windows(English version)

08-00 to 09-51

Windows(Chinese version)

08-00 to 09-51

Product name: Job Management Partner 1/Software Distribution Manager Embedded
RDB Edition(*1)

Version(s):

Windows(English version)

07-50

Windows(Chinese version)

07-50

Product name: JP1/NETM/AIM

Version(s):

Windows

08-00 to 10-10

Product name: JP1/NETM/AIM Embedded RDB Edition(*1)

Version(s):

Windows

07-50 to 07-53

Product name: Job Management Partner 1/Asset Information Manager

Version(s):

Windows(English version)

08-00 to 09-50

Windows(Chinese version)

08-00 to 09-50

Product name: Job Management Partner 1/Asset Information Manager Embedded RDB
Edition(*1)

Version(s):

Windows(English version)

07-50

Windows(Chinese version)

07-50

Product name: JP1/NETM/AIM for Blade PC(*2)

Version(s):

Windows

07-53 to 07-55

- - Hitachi IT Operations Director

Product name: Hitachi IT Operations Director

Version(s):

Windows

03-00 to 04-50

*1Please upgrade to a later product version.*2For details about this version,
contact your Hitachi support service representative.

Fixed products

The information is organized under the following headings:

(Example)

Product name: Gives the name of the fixed product.

Version:

Platform

Gives the fixed version, and release date.

Scheduled version:

Platform

Gives the fixed version scheduled to be released.

- - JP1 Automation

Product name: JP1/Automatic Job Management System 3 - Manager

Version(s):

Windows

11-10-04 August 21, 2017

10-50-10 July 14, 2017

Linux

11-10-04 August 21, 2017

10-50-10 July 14, 2017

AIX

11-10-04 August 21, 2017

10-50-10 July 14, 2017

Solaris

11-10-04 August 21, 2017

10-50-10 July 14, 2017

HP-UX

11-10-04 August 21, 2017

10-50-10 July 14, 2017

Scheduled version(s):

Windows

11-00-11

10-10-17

10-00-14

09-50-24

09-10-29

Linux

11-00-11

10-10-17

10-00-14

09-50-24

09-10-29

AIX

11-00-11

10-10-17

10-00-14

09-50-24

09-10-29

Solaris

11-00-11

10-10-17

10-00-14

09-50-24

09-10-29

HP-UX

11-00-11

10-10-17

10-00-14

09-50-24

09-10-29

Product name: Job Management Partner 1/Automatic Job Management System 3 - 
Manager

Scheduled version(s):

Windows(Multi-language version)

10-50-10

10-10-17

10-00-14

Linux(Multi-language version)

10-50-10

10-10-17

10-00-14

AIX(Multi-language version)

10-50-10

10-10-17

10-00-14

Solaris(Multi-language version)

10-50-10

10-10-17

10-00-14

HP-UX(Multi-language version)

10-50-10

10-10-17

10-00-14

Product name: JP1/Automatic Operation

Version(s):

Windows

11-11 March 31, 2017

Linux

11-11 March 31, 2017

Scheduled version(s):

Windows

10-54-03

Linux

10-54-02

- - JP1 Monitoring

Product name: JP1/Integrated Management - Manager

Version(s):

Windows

11-10-03 August 31, 2017

11-01-05 July 6, 2017

Linux

11-10-03 August 31, 2017

11-01-05 July 6, 2017

AIX

11-10-03 August 31, 2017

11-01-05 July 6, 2017

Scheduled version(s):

Windows

11-00-03

10-50-06

Linux

11-00-03

10-50-06

AIX

11-00-03

10-50-06

Solaris

10-50-06

HP-UX

10-50-06

Product name: JP1/Integrated Management - Service Support

Scheduled version(s):

Windows

10-50-04

Product name: JP1/Integrated Management - Service Support Starter Edition

Scheduled version(s):

Windows

10-50-04

Product name: JP1/Integrated Management - Service Support Advanced Edition

Scheduled version(s):

Windows

10-50-04

Product name: JP1/Service Support

Product name: JP1/Service Support Starter Edition

Scheduled version(s):

Windows

11-10-01

11-00-04

Product name: JP1/Service Level Management - Manager

Version(s):

Windows

11-00-03 August 2, 2017

Product name: JP1/Operation Analytics

Version(s):

Windows

11-10-03 August 31, 2017

- - JP1 Compliance

Product name: JP1/IT Desktop Management 2 - Manager

Version(s):

Windows

11-10-04 June 29, 2017

11-01-07 July 6, 2017

11-00-08 August 7, 2017

Scheduled version(s):

Windows

10-50-12

Product name: JP1/IT Desktop Management 2 - Operations Director

Version(s):

Windows

11-10-04 June 29, 2017

11-01-07 July 6, 2017

Product name: Job Management Partner 1/IT Desktop Management 2 - Manager

Scheduled version(s):

Windows(Multi-language version)

10-50-11

Product name: JP1/IT Desktop Management 2 - Smart Device Manager

Version(s):

Windows

11-10-02 August 1, 2017

Product name: JP1/NETM/DM Manager

Version(s):

Windows

10-10-17 March 30, 2017

Product name: Job Management Partner 1/Software Distribution Manager

Scheduled version(s):

Windows(English version)

09-51-13

Windows(Chinese version)

09-51-13

Product name: JP1/NETM/AIM

Version(s):

Windows

10-10-09 March 30, 2017

Product name: Job Management Partner 1/Asset Information Manager

Scheduled version(s):

Windows(English version)

09-50-06

Windows(Chinese version)

09-50-06

- - Hitachi IT Operations Director

Product name: Hitachi IT Operations Director

Scheduled version(s):

Windows

04-50-12

For details on the fixed products, contact your Hitachi support service 
representative.

- --------------------------END INCLUDED TEXT--------------------

You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.

NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.

NOTE: This is only the original release of the security bulletin.  It may
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

        http://www.auscert.org.au/render.html?cid=1980

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967

iQIVAwUBWajgg4x+lLeg9Ub1AQiB/A/9H3liXZzFGlpcS+8/syarGs4xFMj6bgy7
MFCctIQVAIYOiD5d9nRoZf8/DL95rZIqfQI6CR2xlnVVFbgHP6RDZ9QVotKaUeeR
ZO9qXOEHtxdkEoO6FkwSMnQ1i1h5j9OdOmep/mMY9m+7d8ztoLjauDsRVP3olO/e
fo71akM+8sJRDRJZfsK6TFsMu+fixzeI6lOzG6kSbQg7JmIRnGZQmfdrFRRSti/y
lIVHOSSfBxPro4uB/rb0kSbSL6fdG8qhetpchs38TOEnnNG7LeWwoHYdi0ZDrD0a
S7lDod2oHDDrb68cvqlADm1wcMvqJLvez4UQOo9uHaCwlgmmXruHKQFjELviEk1w
NIsk2602957lvp/Do/re5c9s6bPL/+WJlGqjOAK5KY5ctsVQNAiyj2XFwiB0Iyqx
wvEKkqddxfXJkzZ7/OrB04AhOqPSv+ZcjlqXbeK5FtgykVdz9N+4eee3n0UtJvg3
IvMQF8RUNUWHBYTyXFPtK9awwsGxKNX8yoD+qFYOw4ahURPhmfRRBqUBb/iProrF
WVySo0BTIMpJHD0IvzdZzqlb5It77Z+/BnNVKtA2n3KFAGUH9VylcdvFtPamkk2s
cu21QDkoOXdvN0dwwkMZFimi48O9WwEJ4E8TEZUmw1RlQeYNF1dDiIPtMfFX2LBE
cvel+vEHbwA=
=jJkF
-----END PGP SIGNATURE-----

« Back to bulletins