Secunia

Mike Arnold has reported a vulnerability in SAP Business One, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error in the license manager service (NT_Naming_Service.exe). This can be exploited to cause a stack-based buffer overflow via a specially crafted TCP packet sent to port 30000.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is reported in SAP Business One 2005-A versions 6.80.123 and 6.80.320. Other versions may also be affected.

Solution
SAP Business One 2005 A and B:
Further details available in Customer Area

Provided and/or discovered by
Mike Arnold

Changelog
Further details available in Customer Area

Original Advisory
http://milw0rm.com/exploits/9319

Deep Links
Links available in Customer Area