Directory traversal vulnerability in Groupmax World Wide Web (GmaxWWW) 2 and 3, and Desktop 5, 6, and Desktop for Jichitai allows remote authenticated users to read arbitrary .html files via the template name parameter.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Groupmax_world_wide_web | Hitachi | 2 (including) | 2 (including) |
| Groupmax_world_wide_web | Hitachi | 02_00 (including) | 02_00 (including) |
| Groupmax_world_wide_web | Hitachi | 02_20 (including) | 02_20 (including) |
| Groupmax_world_wide_web | Hitachi | 02_20_a (including) | 02_20_a (including) |
| Groupmax_world_wide_web | Hitachi | 02_31_i (including) | 02_31_i (including) |
| Groupmax_world_wide_web | Hitachi | 3 (including) | 3 (including) |
| Groupmax_world_wide_web | Hitachi | 03_00 (including) | 03_00 (including) |
| Groupmax_world_wide_web | Hitachi | 03_10_h (including) | 03_10_h (including) |
| Groupmax_world_wide_web | Hitachi | 03_11_b (including) | 03_11_b (including) |
| Groupmax_world_wide_web_desktop | Hitachi | 5 (including) | 5 (including) |
| Groupmax_world_wide_web_desktop | Hitachi | 05_00 (including) | 05_00 (including) |
| Groupmax_world_wide_web_desktop | Hitachi | 05_11_f (including) | 05_11_f (including) |
| Groupmax_world_wide_web_desktop | Hitachi | 05_11_i (including) | 05_11_i (including) |
| Groupmax_world_wide_web_desktop | Hitachi | 05_11_j (including) | 05_11_j (including) |
| Groupmax_world_wide_web_desktop | Hitachi | 6 (including) | 6 (including) |
| Groupmax_world_wide_web_desktop | Hitachi | 06_00 (including) | 06_00 (including) |
| Groupmax_world_wide_web_desktop | Hitachi | 06_50_b (including) | 06_50_b (including) |
| Groupmax_world_wide_web_desktop | Hitachi | 06_50_c (including) | 06_50_c (including) |
| Groupmax_world_wide_web_desktop | Hitachi | 06_51 (including) | 06_51 (including) |
| Groupmax_world_wide_web_desktop | Hitachi | 06_51_b (including) | 06_51_b (including) |
| Groupmax_world_wide_web_desktop | Hitachi | 06_51_c (including) | 06_51_c (including) |
| Groupmax_world_wide_web_desktop | Hitachi | 06_52 (including) | 06_52 (including) |
| Groupmax_world_wide_web_desktop | Hitachi | 06_52_b (including) | 06_52_b (including) |
| Groupmax_world_wide_web_desktop | Hitachi | gold (including) | gold (including) |
References
- http://secunia.com/advisories/13321
- http://www.hitachi-support.com/security_e/vuls_e/HS04-007_e/01-e.html
- http://www.osvdb.org/12153
- http://www.securityfocus.com/bid/11773
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18278
- http://secunia.com/advisories/13321
- http://www.hitachi-support.com/security_e/vuls_e/HS04-007_e/01-e.html
- http://www.osvdb.org/12153
- http://www.securityfocus.com/bid/11773
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18278