>> Hitachi Web Server Security Bypass and Cross Site Scripting Issues
Title : Hitachi Web Server Security Bypass and Cross Site Scripting Issues VUPEN ID : VUPEN/ADV-2007-3666 CVE ID : CVE-2007-5809 - CVE-2007-5810
Rated as : Moderate Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2007-10-31
Technical Description
Multiple vulnerabilities have been identified in Hitachi Web Server, which could be exploited by attackers to bypass security restrictions or execute arbitrary scripting code.
The first issue is caused by an error when authenticating SSL clients, which could be exploited by attackers to cause a vulnerable server to accept a forged certificate.
The second vulnerability is caused by input validation errors in the server-status pages when processing user-supplied data, which could be exploited by attackers to cause arbitrary scripting code to be executed by the user's browser in the security context of an affected Web site.
