----------------------------------------------------------------------

Bist Du interessiert an einem neuen Job in IT-Sicherheit?


Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT-
Sicherheit:
http://secunia.com/secunia_vacancies/

----------------------------------------------------------------------

TITLE:
Hitachi Groupmax Form and Web Workflow Server Set Denial of Service

SECUNIA ADVISORY ID:
SA16135

VERIFY ADVISORY:
http://secunia.com/advisories/16135/

CRITICAL:
Less critical

IMPACT:
DoS

WHERE:
>From remote

SOFTWARE:
Groupmax Web Workflow Server Set for Active Server Pages 6.x
http://secunia.com/product/5416/
Groupmax Web Workflow Server Set for Active Server Pages 5.x
http://secunia.com/product/5415/
Groupmax Form for Active Server Pages 3.x
http://secunia.com/product/5417/

DESCRIPTION:
A vulnerability has been reported in Groupmax Web Workflow Server Set
for (ASP) Active Server Pages and Groupmax Form for ASP, which can be
exploited by malicious users to cause a DoS (Denial of Service).

The vulnerability is caused due to an error when processing requests
for attached files and can be exploited to cause a DoS by repeatedly
sending requests containing device names.

See the vendor advisory for a matrix of affected versions.

SOLUTION:
Groupmax Form for ASP (versions 03-10 through 03-10-/D):
Update to version 06-52-/D.

Groupmax Web Workflow Server Set for ASP (versions 06-00 through
06-52-/C):
Update to version 06-52-/D.

Updates are reportedly being scheduled for the other versions.

PROVIDED AND/OR DISCOVERED BY:
Reported by vendor.

ORIGINAL ADVISORY:
Hitachi:
http://www.hitachi-support.com/security_e/vuls_e/HS05-012_e/01-e.html

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------