Vulnerability Name:

CVE-2009-4777 (CCN-53115)

Assigned:2009-09-09
Published:2009-09-09
Updated:2017-08-17
Summary:Unspecified vulnerability in multiple versions of Hitachi JP1/Automatic Job Management System 2 - View, JP1/Integrated Management - View, and JP1/Cm2/SNMP System Observer, allows remote attackers to cause a denial of service ("abnormal" termination) via vectors related to the display of an "invalid GIF file."
CVSS v3 Severity:5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Low
CVSS v2 Severity:4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P)
3.2 Low (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
4.3 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P)
3.2 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
Vulnerability Type:CWE-noinfo
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2009-4777

Source: OSVDB
Type: UNKNOWN
57832

Source: CCN
Type: SA36646
Hitachi Products GIF Processing Denial of Service Vulnerability

Source: SECUNIA
Type: Vendor Advisory
36646

Source: CCN
Type: Hitachi Security Vulnerability Information HS09-016
Problem where JP1/Automatic Job Management System 2 - View, JP1/Integrated Management - View, and JP1/Cm2/SNMP System Observer abnormally terminate when an invalid GIF file is displayed

Source: CONFIRM
Type: Vendor Advisory
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS09-016/index.html

Source: CCN
Type: OSVDB ID: 57832
Hitachi Multiple Products Malformed GIF Processing DoS

Source: BID
Type: UNKNOWN
36311

Source: CCN
Type: BID-36311
Hitachi Multiple Products GIF File Parsing Denial of Service Vulnerability

Source: VUPEN
Type: Vendor Advisory
ADV-2009-2576

Source: XF
Type: UNKNOWN
hitachi-gif-dos(53115)

Source: XF
Type: UNKNOWN
hitachi-gif-dos(53115)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:hitachi:jp1_integrated_management_service_support:08-10:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1_integrated_management_service_support:08-10-01:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1_integrated_management_service_support:08-10-02:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1_integrated_management_service_support:08-10-03:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1_integrated_management_service_support:08-10-04:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1_integrated_management_service_support:08-10-05:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1_integrated_management_service_support:08-11:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1_integrated_management_service_support:08-11-01:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1_integrated_management_service_support:08-11-02:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1_integrated_management_service_support:08-11-03:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1_integrated_management_service_support:08-50:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1_integrated_management_service_support:08-50-01:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1_integrated_management_service_support:08-50-02:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1_integrated_management_service_support:08-50-03:*:*:*:*:*:*:*

    • Configuration 2:
  • cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:06-00:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:06-00-/k:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:06-51:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:06-51-/p1:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:06-71:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:06-71-/q:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:07-00:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:07-00-g1:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:07-10:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:07-10-/h:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:07-10-10:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:07-10-11:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:07-11:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:07-11-15:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:07-50:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:07-50-17:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:08-00:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:08-00-13:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:08-01:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:08-01-05:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:08-10:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:08-10-11:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:08-50:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:08-50-08:*:*:*:*:*:*:*
  • AND
  • cpe:/o:microsoft:windows:*:*:*:*:*:*:*:*

    • Configuration 3:
  • cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:06-51:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:06-51-/p:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:06-71:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:06-71-/q:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:07-10:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:07-10-/h:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:07-10-10:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:07-11:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:07-11-15:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:07-50:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/automatic_job_management_system_2-view:07-50-17:*:*:*:*:*:*:*
  • AND
  • cpe:/o:hp:hp-ux:*:*:*:*:*:*:*:*
  • OR cpe:/o:sun:solaris:*:*:*:*:*:*:*:*

    • Configuration 4:
  • cpe:/a:hitachi:job_management_partner_1/automatic_job_management_system_2-view:06-00:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:job_management_partner_1/automatic_job_management_system_2-view:06-00-/a:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:job_management_partner_1/automatic_job_management_system_2-view:06-51:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:job_management_partner_1/automatic_job_management_system_2-view:06-51-n1:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:job_management_partner_1/automatic_job_management_system_2-view:06-71:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:job_management_partner_1/automatic_job_management_system_2-view:06-71-m1:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:job_management_partner_1/automatic_job_management_system_2-view:07-00:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:job_management_partner_1/automatic_job_management_system_2-view:07-00-/g:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:job_management_partner_1/automatic_job_management_system_2-view:07-50:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:job_management_partner_1/automatic_job_management_system_2-view:07-50-17:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:job_management_partner_1/automatic_job_management_system_2-view:08-00:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:job_management_partner_1/automatic_job_management_system_2-view:08-00-04:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:job_management_partner_1/automatic_job_management_system_2-view:08-00-13:*:*:*:*:*:*:*
  • AND
  • cpe:/o:microsoft:windows:*:*:*:*:*:*:*:*

    • Configuration 5:
  • cpe:/a:hitachi:job_management_partner_1/automatic_job_management_system_2-view:06-51:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:job_management_partner_1/automatic_job_management_system_2-view:06-51-/n:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:job_management_partner_1/automatic_job_management_system_2-view:06-71:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:job_management_partner_1/automatic_job_management_system_2-view:06-71-/m:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:job_management_partner_1/automatic_job_management_system_2-view:07-00:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:job_management_partner_1/automatic_job_management_system_2-view:07-00-/g:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:job_management_partner_1/automatic_job_management_system_2-view:07-50:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:job_management_partner_1/automatic_job_management_system_2-view:07-50-17:*:*:*:*:*:*:*
  • AND
  • cpe:/o:hp:hp-ux:*:*:*:*:*:*:*:*
  • OR cpe:/o:sun:solaris:*:*:*:*:*:*:*:*

    • Configuration 6:
  • cpe:/a:hitachi:job_management_partner_1/integrated_management-view:08-01:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:job_management_partner_1/integrated_manager-console_view:06-00:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:job_management_partner_1/integrated_manager-console_view:06-71:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:job_management_partner_1/integrated_manager-view:07-00:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/integrated_management-view:08-00:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/integrated_management-view:08-50-06:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/integrated_manager-console_view:06-00:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/integrated_manager-console_view:06-71:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/integrated_manager-view:07-00:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/integrated_manager-view:07-51:*:*:*:*:*:*:*
  • AND
  • cpe:/o:microsoft:windows:*:*:*:*:*:*:*:*

    • Configuration 7:
  • cpe:/a:hitachi:jp1/cm2/snmp_system_observer:08-00:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/cm2/snmp_system_observer:08-00-09:*:*:*:*:*:*:*
  • AND
  • cpe:/o:hp:hp-ux:*:*:*:*:*:*:*:*
  • OR cpe:/o:microsoft:windows:*:*:*:*:*:*:*:*
  • OR cpe:/o:sun:solaris:*:*:*:*:*:*:*:*

    • Configuration 8:
  • cpe:/a:hitachi:jp1/performance_management/snmp_system_observer:07-00:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/performance_management/snmp_system_observer:07-00-/e:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/performance_management/snmp_system_observer:07-10:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/performance_management/snmp_system_observer:07-10-/b:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/performance_management/snmp_system_observer:07-50:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/performance_management/snmp_system_observer:07-50-09:*:*:*:*:*:*:*
  • AND
  • cpe:/o:hp:hp-ux:*:*:*:*:*:*:*:*
  • OR cpe:/o:microsoft:windows:*:*:*:*:*:*:*:*
  • OR cpe:/o:sun:solaris:*:*:*:*:*:*:*:*

    • Configuration 9:
  • cpe:/a:hitachi:jp1/server_system_observer:06-51:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/server_system_observer:06-51-/f:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/server_system_observer:06-71:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/server_system_observer:06-71-/h:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:jp1/server_system_observer:06-71-03:*:*:*:*:*:*:*
  • AND
  • cpe:/o:hp:hp-ux:*:*:*:*:*:*:*:*
  • OR cpe:/o:microsoft:windows:*:*:*:*:*:*:*:*
  • OR cpe:/o:sun:solaris:*:*:*:*:*:*:*:*

    • Configuration 10:
  • cpe:/a:hitachi:job_management_partner_1/performance_management/snmp_system_observer:07-00:*:*:*:*:*:*:*
  • AND
  • cpe:/o:hp:hp-ux:*:*:*:*:*:*:*:*
  • OR cpe:/o:microsoft:windows:*:*:*:*:*:*:*:*
  • OR cpe:/o:sun:solaris:*:*:*:*:*:*:*:*

    • Configuration 11:
  • cpe:/a:hitachi:job_management_partner_1/snmp_system_observer:06-51:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:job_management_partner_1/snmp_system_observer:06-51-/a:*:*:*:*:*:*:*
  • OR cpe:/a:hitachi:job_management_partner_1/snmp_system_observer:06-71:*:*:*:*:*:*:*
  • AND
  • cpe:/o:hp:hp-ux:*:*:*:*:*:*:*:*
  • OR cpe:/o:microsoft:windows:*:*:*:*:*:*:*:*
  • OR cpe:/o:sun:solaris:*:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    hitachi jp1 integrated management service support 08-10
    hitachi jp1 integrated management service support 08-10-01
    hitachi jp1 integrated management service support 08-10-02
    hitachi jp1 integrated management service support 08-10-03
    hitachi jp1 integrated management service support 08-10-04
    hitachi jp1 integrated management service support 08-10-05
    hitachi jp1 integrated management service support 08-11
    hitachi jp1 integrated management service support 08-11-01
    hitachi jp1 integrated management service support 08-11-02
    hitachi jp1 integrated management service support 08-11-03
    hitachi jp1 integrated management service support 08-50
    hitachi jp1 integrated management service support 08-50-01
    hitachi jp1 integrated management service support 08-50-02
    hitachi jp1 integrated management service support 08-50-03
    hitachi jp1/automatic job management system 2-view 06-00
    hitachi jp1/automatic job management system 2-view 06-00-/k
    hitachi jp1/automatic job management system 2-view 06-51
    hitachi jp1/automatic job management system 2-view 06-51-/p1
    hitachi jp1/automatic job management system 2-view 06-71
    hitachi jp1/automatic job management system 2-view 06-71-/q
    hitachi jp1/automatic job management system 2-view 07-00
    hitachi jp1/automatic job management system 2-view 07-00-g1
    hitachi jp1/automatic job management system 2-view 07-10
    hitachi jp1/automatic job management system 2-view 07-10-/h
    hitachi jp1/automatic job management system 2-view 07-10-10
    hitachi jp1/automatic job management system 2-view 07-10-11
    hitachi jp1/automatic job management system 2-view 07-11
    hitachi jp1/automatic job management system 2-view 07-11-15
    hitachi jp1/automatic job management system 2-view 07-50
    hitachi jp1/automatic job management system 2-view 07-50-17
    hitachi jp1/automatic job management system 2-view 08-00
    hitachi jp1/automatic job management system 2-view 08-00-13
    hitachi jp1/automatic job management system 2-view 08-01
    hitachi jp1/automatic job management system 2-view 08-01-05
    hitachi jp1/automatic job management system 2-view 08-10
    hitachi jp1/automatic job management system 2-view 08-10-11
    hitachi jp1/automatic job management system 2-view 08-50
    hitachi jp1/automatic job management system 2-view 08-50-08
    microsoft windows *
    hitachi jp1/automatic job management system 2-view 06-51
    hitachi jp1/automatic job management system 2-view 06-51-/p
    hitachi jp1/automatic job management system 2-view 06-71
    hitachi jp1/automatic job management system 2-view 06-71-/q
    hitachi jp1/automatic job management system 2-view 07-10
    hitachi jp1/automatic job management system 2-view 07-10-/h
    hitachi jp1/automatic job management system 2-view 07-10-10
    hitachi jp1/automatic job management system 2-view 07-11
    hitachi jp1/automatic job management system 2-view 07-11-15
    hitachi jp1/automatic job management system 2-view 07-50
    hitachi jp1/automatic job management system 2-view 07-50-17
    hp hp-ux *
    sun solaris *
    hitachi job management partner 1/automatic job management system 2-view 06-00
    hitachi job management partner 1/automatic job management system 2-view 06-00-/a
    hitachi job management partner 1/automatic job management system 2-view 06-51
    hitachi job management partner 1/automatic job management system 2-view 06-51-n1
    hitachi job management partner 1/automatic job management system 2-view 06-71
    hitachi job management partner 1/automatic job management system 2-view 06-71-m1
    hitachi job management partner 1/automatic job management system 2-view 07-00
    hitachi job management partner 1/automatic job management system 2-view 07-00-/g
    hitachi job management partner 1/automatic job management system 2-view 07-50
    hitachi job management partner 1/automatic job management system 2-view 07-50-17
    hitachi job management partner 1/automatic job management system 2-view 08-00
    hitachi job management partner 1/automatic job management system 2-view 08-00-04
    hitachi job management partner 1/automatic job management system 2-view 08-00-13
    microsoft windows *
    hitachi job management partner 1/automatic job management system 2-view 06-51
    hitachi job management partner 1/automatic job management system 2-view 06-51-/n
    hitachi job management partner 1/automatic job management system 2-view 06-71
    hitachi job management partner 1/automatic job management system 2-view 06-71-/m
    hitachi job management partner 1/automatic job management system 2-view 07-00
    hitachi job management partner 1/automatic job management system 2-view 07-00-/g
    hitachi job management partner 1/automatic job management system 2-view 07-50
    hitachi job management partner 1/automatic job management system 2-view 07-50-17
    hp hp-ux *
    sun solaris *
    hitachi job management partner 1/integrated management-view 08-01
    hitachi job management partner 1/integrated manager-console view 06-00
    hitachi job management partner 1/integrated manager-console view 06-71
    hitachi job management partner 1/integrated manager-view 07-00
    hitachi jp1/integrated management-view 08-00
    hitachi jp1/integrated management-view 08-50-06
    hitachi jp1/integrated manager-console view 06-00
    hitachi jp1/integrated manager-console view 06-71
    hitachi jp1/integrated manager-view 07-00
    hitachi jp1/integrated manager-view 07-51
    microsoft windows *
    hitachi jp1/cm2/snmp system observer 08-00
    hitachi jp1/cm2/snmp system observer 08-00-09
    hp hp-ux *
    microsoft windows *
    sun solaris *
    hitachi jp1/performance management/snmp system observer 07-00
    hitachi jp1/performance management/snmp system observer 07-00-/e
    hitachi jp1/performance management/snmp system observer 07-10
    hitachi jp1/performance management/snmp system observer 07-10-/b
    hitachi jp1/performance management/snmp system observer 07-50
    hitachi jp1/performance management/snmp system observer 07-50-09
    hp hp-ux *
    microsoft windows *
    sun solaris *
    hitachi jp1/server system observer 06-51
    hitachi jp1/server system observer 06-51-/f
    hitachi jp1/server system observer 06-71
    hitachi jp1/server system observer 06-71-/h
    hitachi jp1/server system observer 06-71-03
    hp hp-ux *
    microsoft windows *
    sun solaris *
    hitachi job management partner 1/performance management/snmp system observer 07-00
    hp hp-ux *
    microsoft windows *
    sun solaris *
    hitachi job management partner 1/snmp system observer 06-51
    hitachi job management partner 1/snmp system observer 06-51-/a
    hitachi job management partner 1/snmp system observer 06-71
    hp hp-ux *
    microsoft windows *
    sun solaris *