CVE-2009-4988
SAP Business One 2005 A - Stack-Based Buffer Overflow via GIOP Request
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2009-4988.
PoCs published by Metasploit, Bruk0ut, including Metasploit module exploits/windows/misc/sap_2005_license.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in SAP Business One License Manager 2005 by sending an excessively long string to overwrite the stack, enabling arbitrary code execution. It targets the 'NT Naming Service' on port 30000.
Description
Stack-based buffer overflow in NT_Naming_Service.exe in SAP Business One 2005 A 6.80.123 and 6.80.320 allows remote attackers to execute arbitrary code via a long GIOP request to TCP port 30000.
Exploits (3)
This Metasploit module exploits a stack buffer overflow in SAP Business One License Manager 2005 by sending an excessively long string to overwrite the stack, enabling arbitrary code execution. It targets the 'NT Naming Service' on port 30000.
This exploit targets a stack-based buffer overflow in SAP Business One 2005-A License Manager (NT_Naming_Service.exe) via TCP port 30000. It sends a crafted GIOP header followed by a large buffer containing a NOP sled, a return address (JMP ESP from User32.dll), and shellcode to execute arbitrary commands (e.g., launching notepad.exe).
This Metasploit module exploits a stack buffer overflow in SAP Business One License Manager 2005 by sending an excessively long string to overwrite the stack, enabling arbitrary code execution. The exploit targets the 'NT Naming Service' on port 30000 and includes a payload with specific bad character restrictions and stack adjustments.