Signature Detail
Short Name |
APP:SAP:BIS-LIC-MGR-BOF |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
SAP Business One License Manager 2005 Buffer Overflow |
Release Date |
2012/01/12 |
Update Number |
2063 |
Supported Platforms |
idp-4.0+, isg-3.4+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: SAP Business One License Manager 2005 Buffer Overflow
This signature detects attempts to exploit a known vulnerability in the SAP Business One License Manager 2005. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.
Extended Description
SAP Business One 2005 is prone to a buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied input before copying it to an insufficiently sized buffer. Successfully exploiting this issue will allow an attacker to execute arbitrary code with SYSTEM-level privileges. Failed exploit attempts will result in a denial-of-service condition.
Affected Products
- SAP Business One 2005 6.80.123
- SAP Business One 2005 6.80.320
References
- BugTraq: 35933
- CVE: CVE-2009-4988