CVE:CVE-2011-5217
CNNVD:CNNVD-201210-618
Hitachi JP1/ServerConductor/DeploymentManager 08-55之前的日文版本和08-51之前的英文版本中的PXE Mtftp服务中存在目录遍历漏洞。远程攻击者利用该漏洞通过未知向量读取任意文件。
solution:Upgrade hitachi jp1/serverconductor/deploymentmanager to a higher version than 08-07,08-06,08-50-\/b,07-52,07-56,07-56-/g(*2,08-00,and avoid the version (,08-07],08-06,(,08-50-\/b],07-52,07-56,07-56-/g(*2),08-00; Upgrade hitachi serverconductor/deploymentmanager to a higher version than 06-00-\/a,01-00,01-01,06-00,and avoid the version (,06-00-\/a],01-00,01-01,06-00