PT-2005-5011 · Groupmax+1 · Groupmax Collaboration Portal+2

Published 2005-12-17 · Updated 2017-07-20 · CVE-2005-4323

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Hitachi Cosminexus Collaboration Portal versions 06-00 through 06-10-/B Groupmax Collaboration Portal versions 07-00 through 07-10-/B Groupmax Collaboration Web Client versions 07-00 through 07-10-/A

Description The issue allows remote attackers to cause a denial of service via repeated invalid requests to the Schedule component. The impact of this denial of service is unspecified.

Recommendations For Hitachi Cosminexus Collaboration Portal versions 06-00 through 06-10-/B, restrict access to the Schedule component to minimize the risk of exploitation. For Groupmax Collaboration Portal versions 07-00 through 07-10-/B, consider disabling the Schedule component until a fix is available. For Groupmax Collaboration Web Client versions 07-00 through 07-10-/A, avoid using the Schedule component in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-4323

Affected Products

Groupmax Collaboration Portal

Groupmax Collaboration Web Client

Hitachi Cosminexus Collaboration Portal

References · 7

• http://hitachi-support.com/security_e/vuls_e/HS05-023_e/01-e.html · Vendor Advisory
• http://secunia.com/advisories/17634 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-4323 · Security Note
• http://securitytracker.com/alerts/2005/Nov/1015241.html · Patch
• http://securitytracker.com/alerts/2005/Nov/1015242.html · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23193 · Note
• http://securityfocus.com/bid/15500 · Note