My thought is that the poison 5 is damage.  It is listed with the damage.  I think how this works is that a single attack roll is made  Did it beat your Ref Def?  Yes, it hit.  Did it beat your Fort Def?  Yes, then poisoned as well, otherwise your not poisoned.