CVE-2008-0620 SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to cause a denial of service (crash) via a 0x53 LPD command, which causes the server to terminate.
HighCVSS 10.0
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to cause a denial of service (crash) via a 0x53 LPD command, which causes the server to terminate.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sapgui | = 7.10 | No fix listed |
| saplpd | <= 6.28 | No fix listed |
| sapsprint | All versions | No fix listed |
References
- 28786 third-party-advisory vendor-advisory
- 28811 third-party-advisory
- 3619 third-party-advisory
- 20080204 Multiple vulnerabilities in SAPlpd 6.28 mailing-list
- 20080205 Re: Multiple vulnerabilities in SAPlpd 6.28 mailing-list
- 27613 exploit vdb-entry
- 1019300 vdb-entry
- ADV-2008-0409 vdb-entry
- ADV-2008-0438 vdb-entry