iDefense Security Advisory 06.25.09 – Remote exploitation of a stack based buffer overflow vulnerability in Unisys’s Business Information Server could allow an attacker to execute arbitrary code with the privileges of the affected service. If attackers send a packet to the Unisys Business Information Server over a TCP port, the attacker can corrupt stack memory and gain arbitrary code execution. iDefense has confirmed the existence of this vulnerability in Business Information Server version 10. Previous versions may also be affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/78668/06.25.09-1.txt
Source: https://packetstormsecurity.com/files/78668/iDEFENSE-Security-Advisory-2009-06-25.1.html