Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
APP:SAP:BIS-LIC-MGR-BOF |
|---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
SAP Business One License Manager 2005 Buffer Overflow |
Release Date |
2012/01/12 |
Update Number |
2063 |
Supported Platforms |
idp-4.0+, isg-3.4+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
APP: SAP Business One License Manager 2005 Buffer Overflow
This signature detects attempts to exploit a known vulnerability in the SAP Business One License Manager 2005. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.
Extended Description
SAP Business One 2005 is prone to a buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied input before copying it to an insufficiently sized buffer. Successfully exploiting this issue will allow an attacker to execute arbitrary code with SYSTEM-level privileges. Failed exploit attempts will result in a denial-of-service condition.
Affected Products
- Sap business_one_2005 6.80.123
- Sap business_one_2005 6.80.320
References
- BugTraq: 35933
- CVE: CVE-2009-4988