Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Mikey27

#22764of 53,630
10Total CVSS
Vulnerabilities · 1
PT-2010-1791
10
2010-08-25
Sap · Sap Business One · CVE-2009-4988
**Name of the Vulnerable Software and Affected Versions** SAP Business One versions 6.80.123 through 6.80.320 **Description** The issue is a stack-based buffer overflow in NT Naming Service.exe, allowing remote attackers to execute arbitrary code via a long GIOP request to TCP port 30000. **Recommendations** For versions 6.80.123 through 6.80.320, consider restricting access to TCP port 30000 to minimize the risk of exploitation. As a temporary workaround, limit the length of GIOP requests to prevent buffer overflow until a patch is available.