Company recognises threat and issues patches

A problem has been found in software shipping with Hitachi servers that could be used by a malicious attacker to cause a denial of service attack.

The vulnerability affects the software in multiple JP1 Server products, including the system observer, job management, performance management, access control and security integrated manager programs.

Hitachi has recognised the problem and said that patches are available. A report on Hitachi's website said that a workaround is also possible until the software has been patched.

"Until the fixed modules are applied, carry out the following workarounds: set filtering rules on the OS or router so that only reliable IP addresses can access the port that JP1/PFM/SNMP system observer's report feature uses," said the Hitachi statement.