CVE:CVE-2004-2493
CNNVD:CNNVD-200412-1070
Groupmax World Wide Web (GmaxWWW)版本2和版本3，以及Desktop版本5，版本6和Jichitai Desktop存在目录遍历漏洞。远程认证用户可以借助template name参数读取任意.html文件。
solution:Upgrade hitachi groupmax_world_wide_web to a higher version than 2,02_00,02_20,02_20_a,02_31_i,3,03_00,03_10_h,03_11_b,and avoid the version 2,02_00,02_20,02_20_a,02_31_i,3,03_00,03_10_h,03_11_b; Upgrade hitachi groupmax_world_wide_web_desktop to a higher version than 5,05_00,05_11_f,05_11_i,05_11_j,6,06_00,06_50_b,06_50_c,06_51,06_51_b,06_51_c,06_52,06_52_b,gold,and avoid the version 5,05_00,05_11_f,05_11_i,05_11_j,6,06_00,06_50_b,06_50_c,06_51,06_51_b,06_51_c,06_52,06_52_b,gold