CVE-2009-4988

This Metasploit module exploits a stack buffer overflow in SAP Business One License Manager 2005 by sending an excessively long string to overwrite the stack, enabling arbitrary code execution. It targets the 'NT Naming Service' on port 30000.

This exploit targets a stack-based buffer overflow in SAP Business One 2005-A License Manager (NT_Naming_Service.exe) via TCP port 30000. It sends a crafted GIOP header followed by a large buffer containing a NOP sled, a return address (JMP ESP from User32.dll), and shellcode to execute arbitrary commands (e.g., launching notepad.exe).

This Metasploit module exploits a stack buffer overflow in SAP Business One License Manager 2005 by sending an excessively long string to overwrite the stack, enabling arbitrary code execution. The exploit targets the 'NT Naming Service' on port 30000 and includes a payload with specific bad character restrictions and stack adjustments.