KLA10312 ACE vulnerability in SAP Business One 2005

A buffer overflow was found in SAP Business One. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed packet.

Original advisories

Exploitation

Public exploits exist for this vulnerability.

Related products

SAP-Business-One

CVE list

CVE-2009-4988 critical

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• SAP Business One 2005 versions 6.80.123 and 6.80.320