----------------------------------------------------------------------

2003: 2,700 advisories published
2004: 3,100 advisories published
2005: 4,600 advisories published
2006: 5,300 advisories published

How do you know which Secunia advisories are important to you?

The Secunia Vulnerability Intelligence Solutions allows you to filter
and structure all the information you need, so you can address issues
effectively.

Get a free trial of the Secunia Vulnerability Intelligence Solutions:
http://corporate.secunia.com/how_to_buy/38/vi/?ref=secadv

----------------------------------------------------------------------

TITLE:
JP1/File Transmission Server/FTP Authentication Bypass and DoS

SECUNIA ADVISORY ID:
SA27735

VERIFY ADVISORY:
http://secunia.com/advisories/27735/

CRITICAL:
Moderately critical

IMPACT:
Security Bypass, DoS

WHERE:
>From remote

SOFTWARE:
Hitachi JP1/File Transmission Server/FTP
http://secunia.com/product/3821/

DESCRIPTION:
Two vulnerabilities have been reported in JP1/File Transmission
Server/FTP, which can be exploited by malicious users to cause a DoS
(Denial of Service) and by malicious people to bypass certain
security restrictions.

1) An unspecified error can be exploited to bypass authentication and
view files in a specific directory.

The vulnerability affects HP-UX, HP-UX(IPF), AIX, Solaris, Linux,
Linux(IPF), HP-UX(English version), and HI-UX/WE2.

2) An error in the processing of an unspecified FTP command can be
exploited to stop the FTP service via a specially crafted file.

The vulnerability affects Windows(x86), Windows(IPF), Windows(English
version), and Windows9X.

SOLUTION:
Update to the latest versions (please see vendor advisories for
details).

PROVIDED AND/OR DISCOVERED BY:
Reported by the vendor.

ORIGINAL ADVISORY:
http://www.hitachi-support.com/security_e/vuls_e/HS07-037_e/index-e.html
http://www.hitachi-support.com/security_e/vuls_e/HS07-038_e/index-e.html

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------