Hackers expose flaw in aging IBM ecommerce software

Two hackers have exposed security flaws in older versions of IBM's ecommerce platform - although Big Blue insists a fix to correct the flaw has long been available.

A programme created by the two hackers, enables outsiders to gain administrative rights to online shops. The security flaw affects code that was written using the IBM script language, Net.Data. Although IBM identified and rectified the problems in 1999, macros written by the user and not changed, despite the advice of IBM, are still open to attack. During tests with the hacker software which was published on the internet, the administrator passwords for a handful of internet shops were able to be changed into decrypted text, including two online jewellers. by Jürgen Höfling, reporter, silicon.de