{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2014-06-11T00:00:00", "descriptions": [{"lang": "en", "value": "JustSystems JUST Online Update, as used in Ichitaro through 2014 and other products, does not properly validate signatures of update modules, which allows remote attackers to spoof modules and execute arbitrary code via a crafted signature."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2014-06-16T14:57:01", "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://www.justsystems.com/jp/info/js14002.html"}, {"name": "JVNDB-2014-000053", "tags": ["third-party-advisory", "x_refsource_JVNDB"], "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2014-000053"}, {"name": "JVN#50129191", "tags": ["third-party-advisory", "x_refsource_JVN"], "url": "http://jvn.jp/en/jp/JVN50129191/index.html"}, {"tags": ["x_refsource_MISC"], "url": "http://www.ipa.go.jp/security/ciadr/vul/20140611-jvn.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "vultures@jpcert.or.jp", "ID": "CVE-2014-2003", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "JustSystems JUST Online Update, as used in Ichitaro through 2014 and other products, does not properly validate signatures of update modules, which allows remote attackers to spoof modules and execute arbitrary code via a crafted signature."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://www.justsystems.com/jp/info/js14002.html", "refsource": "CONFIRM", "url": "http://www.justsystems.com/jp/info/js14002.html"}, {"name": "JVNDB-2014-000053", "refsource": "JVNDB", "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2014-000053"}, {"name": "JVN#50129191", "refsource": "JVN", "url": "http://jvn.jp/en/jp/JVN50129191/index.html"}, {"name": "http://www.ipa.go.jp/security/ciadr/vul/20140611-jvn.html", "refsource": "MISC", "url": "http://www.ipa.go.jp/security/ciadr/vul/20140611-jvn.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T09:58:16.292Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.justsystems.com/jp/info/js14002.html"}, {"name": "JVNDB-2014-000053", "tags": ["third-party-advisory", "x_refsource_JVNDB", "x_transferred"], "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2014-000053"}, {"name": "JVN#50129191", "tags": ["third-party-advisory", "x_refsource_JVN", "x_transferred"], "url": "http://jvn.jp/en/jp/JVN50129191/index.html"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.ipa.go.jp/security/ciadr/vul/20140611-jvn.html"}]}]}, "cveMetadata": {"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "assignerShortName": "jpcert", "cveId": "CVE-2014-2003", "datePublished": "2014-06-16T14:00:00", "dateReserved": "2014-02-17T00:00:00", "dateUpdated": "2024-08-06T09:58:16.292Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:justsystems:ichitaro:*:*:*:*:*:*:*:*", "matchCriteriaId": "D4144834-782B-492F-B935-F036A5C26902", "versionEndIncluding": "2014", "vulnerable": true}, {"criteria": "cpe:2.3:a:justsystems:ichitaro:10:*:*:*:*:*:*:*", "matchCriteriaId": "64910A2D-4EFD-4435-B021-A47E5CA10901", "vulnerable": true}, {"criteria": "cpe:2.3:a:justsystems:ichitaro:11:*:*:*:*:*:*:*", "matchCriteriaId": "F3255951-1684-4F78-9AA8-0721D43C4E75", "vulnerable": true}, {"criteria": "cpe:2.3:a:justsystems:ichitaro:12:*:*:*:*:*:*:*", "matchCriteriaId": "BF1D2069-D1F4-4F31-8B78-9768F43EF847", "vulnerable": true}, {"criteria": "cpe:2.3:a:justsystems:ichitaro:13:*:*:*:*:*:*:*", "matchCriteriaId": "9D65FA81-F110-4C21-8BD4-1A14BFFC7730", "vulnerable": true}, {"criteria": "cpe:2.3:a:justsystems:ichitaro:2004:*:*:*:*:*:*:*", "matchCriteriaId": "AFAE853E-5415-4B31-A873-E74E7C66C52F", "vulnerable": true}, {"criteria": "cpe:2.3:a:justsystems:ichitaro:2005:*:*:*:*:*:*:*", "matchCriteriaId": "471FA5F8-8EC2-4FEB-93E0-B838F81BD472", "vulnerable": true}, {"criteria": "cpe:2.3:a:justsystems:ichitaro:2006:*:*:*:*:*:*:*", "matchCriteriaId": "9E7E7611-56FC-4379-99FE-8D42046FA9C8", "vulnerable": true}, {"criteria": "cpe:2.3:a:justsystems:ichitaro:2006:-:government:*:*:*:*:*", "matchCriteriaId": "AA38365F-0FB9-4570-8A38-4FCC9AADA267", "vulnerable": true}, {"criteria": "cpe:2.3:a:justsystems:ichitaro:2007:*:*:*:*:*:*:*", "matchCriteriaId": "A749FA56-6DE2-48A4-902C-6EB7E6575BA3", "vulnerable": true}, {"criteria": "cpe:2.3:a:justsystems:ichitaro:2007:-:government:*:*:*:*:*", "matchCriteriaId": "6A5C721C-CA01-4C6A-AC7C-C07FC3A333D3", "vulnerable": true}, {"criteria": "cpe:2.3:a:justsystems:ichitaro:2008:*:*:*:*:*:*:*", "matchCriteriaId": "8B8FAFF2-94AD-4C8B-8B10-57651DEA6191", "vulnerable": true}, {"criteria": "cpe:2.3:a:justsystems:ichitaro:2008:-:government:*:*:*:*:*", "matchCriteriaId": "25F1AF4E-E4EC-4E66-B532-002A8512916F", "vulnerable": true}, {"criteria": "cpe:2.3:a:justsystems:ichitaro:2009:*:*:*:*:*:*:*", "matchCriteriaId": "12205BDB-6DD6-46B8-891B-E4EAAB8F3588", "vulnerable": true}, {"criteria": "cpe:2.3:a:justsystems:ichitaro:2009:-:government:*:*:*:*:*", "matchCriteriaId": "9BC34189-32FE-4C8E-A87E-731C622ECBC0", "vulnerable": true}, {"criteria": "cpe:2.3:a:justsystems:ichitaro:2009:-:trial:*:*:*:*:*", "matchCriteriaId": "B5B023D0-C271-45B2-82D9-9AD4D800893E", "vulnerable": true}, {"criteria": "cpe:2.3:a:justsystems:ichitaro:2010:*:*:*:*:*:*:*", "matchCriteriaId": "C9C3EDDB-E30F-45BA-94C4-5C917283971E", "vulnerable": true}, {"criteria": "cpe:2.3:a:justsystems:ichitaro:2010:-:government:*:*:*:*:*", "matchCriteriaId": "6881ACA2-0625-4E3F-8136-D20E627BFC9E", "vulnerable": true}, {"criteria": "cpe:2.3:a:justsystems:ichitaro:2011:*:*:*:*:*:*:*", "matchCriteriaId": "3A4975EC-E1DB-45C0-AFF6-C3E97F273332", "vulnerable": true}, {"criteria": "cpe:2.3:a:justsystems:ichitaro:2011:-:sou:*:*:*:*:*", "matchCriteriaId": "47047585-7145-40D5-8FA2-B1B542CF6AC8", "vulnerable": true}, {"criteria": "cpe:2.3:a:justsystems:ichitaro:2012:-:shou:*:*:*:*:*", "matchCriteriaId": "6EE20B2C-6630-4362-9438-91571BD531B6", "vulnerable": true}, {"criteria": "cpe:2.3:a:justsystems:ichitaro:2013:-:gen:*:*:*:*:*", "matchCriteriaId": "2DF9AE8E-A943-49AF-A507-4423ADC8796C", "vulnerable": true}, {"criteria": "cpe:2.3:a:justsystems:ichitaro:2013:-:gen_trial:*:*:*:*:*", "matchCriteriaId": "35A0240E-138D-4CE3-9D9E-30AEE34F9238", "vulnerable": true}, {"criteria": "cpe:2.3:a:justsystems:just_online_update:-:*:*:*:*:*:*:*", "matchCriteriaId": "96F6290F-EB66-4423-8F54-436BBC547547", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "JustSystems JUST Online Update, as used in Ichitaro through 2014 and other products, does not properly validate signatures of update modules, which allows remote attackers to spoof modules and execute arbitrary code via a crafted signature."}, {"lang": "es", "value": "JustSystems JUST Online Update, utilizado en Ichitaro hasta 2014 y otros productos, no valida debidamente firmas de m\u00f3dulos de actualizaci\u00f3n, lo que permite a atacantes remotos falsificar m\u00f3dulos y ejecutar c\u00f3digo arbitrario a trav\u00e9s de una firma manipulada."}], "id": "CVE-2014-2003", "lastModified": "2014-06-16T16:43:25.000", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.6, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 4.9, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2014-06-16T14:55:05.457", "references": [{"source": "vultures@jpcert.or.jp", "url": "http://jvn.jp/en/jp/JVN50129191/index.html"}, {"source": "vultures@jpcert.or.jp", "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2014-000053"}, {"source": "vultures@jpcert.or.jp", "url": "http://www.ipa.go.jp/security/ciadr/vul/20140611-jvn.html"}, {"source": "vultures@jpcert.or.jp", "tags": ["Vendor Advisory"], "url": "http://www.justsystems.com/jp/info/js14002.html"}], "sourceIdentifier": "vultures@jpcert.or.jp", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}