SAP Internet Graphics Server Remote Denial Of Service Vulnerability

Bugtraq ID:	19469
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Aug 10 2006 12:00AM
Updated:	Aug 11 2006 05:35PM
Credit:	Mariano Nunez Di Croce reported this issue to the vendor.
Vulnerable:	SAP Internet Graphics Server 6.40 Patch 11 SAP Internet Graphics Server 6.40 SAP Internet Graphics Server 7.00 Patch 3 SAP Internet Graphics Server 6.40 Patch 15
Not Vulnerable:	SAP Internet Graphics Server 7.00 Patch 4 SAP Internet Graphics Server 6.40 Patch 16

SAP Internet Graphics Server Remote Denial Of Service Vulnerability

SAP Internet Graphics Server is prone to a remote denial-of-service vulnerability.

A remote attacker can exploit this issue to crash the affected service, effectively denying service to legitimate users.

SAP Internet Graphics Server Remote Denial Of Service Vulnerability

Attackers can exploit this issue via a web client.

SAP Internet Graphics Server Remote Denial Of Service Vulnerability

Solution:
The vendor has released updates to address this issue. Please contact the vendor for details on obtaining and applying the appropriate updates.

SAP Internet Graphics Server Remote Denial Of Service Vulnerability

References:

• SAP Homepage (SAP)
  
• CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Remote Denia (CYBSEC)