Organisations running the popular SAP R/3 enterprise software package risk exposing sensitive information because of a new security vulnerability, a UK government UNIRAS alert warns.
The UK's National Infrastructure Security Coordination Centre (NISCC) said the vulnerability stems from an input validation error with the SAP Internet Graphics Server sub-component of SAP R/3. The flaw creates a mechanism for hackers to launch directory traversal attacks.
NISCC rates the vulnerability, discovered by UK net security consultancy Corsaire, as high risk. Users are urged to update to version 6.40 Patch 11 or later. ®
Related stories
Countdown to SAP R/3 upgrade deadline
Oracle taken to task for time to fix vulnerabilities
Can Sun turn SOA rhetoric into weapon against IBM and SAP?
Microsoft and SAP deepen alliance
Biting the hand that feeds IT
![[Print]](/Design/graphics/icons/pf.png "Printer-friendly version"){kind=icon}
![[Mobile]](/Design/graphics/icons/regmob.png "Read The Reg on your mobile phone"){kind=icon}
![[Alerts]](/Design/graphics/icons/alerts.png "Reg Desktop News Alerts"){kind=icon}
Post to Slashdot
Digg this
Add to del.icio.us
Reddit
Previous Article
