CVE-2008-0621 Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary code via long arguments to the (1) 0x01, (2) 0x02, (3) 0x03,....
HighCVSS 7.5
EPSS 73.4%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary code via long arguments to the (1) 0x01, (2) 0x02, (3) 0x03, (4) 0x04, and (5) 0x05 LPD commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sapgui | = 7.10 | No fix listed |
| saplpd | <= 6.28 | No fix listed |
| sapsprint | All versions | No fix listed |
References
- 28786 third-party-advisory vendor-advisory
- 28811 third-party-advisory
- 3619 third-party-advisory
- 20080204 Multiple vulnerabilities in SAPlpd 6.28 mailing-list
- 20080205 Re: Multiple vulnerabilities in SAPlpd 6.28 mailing-list
- 27613 exploit vdb-entry
- 1019300 vdb-entry
- ADV-2008-0409 vdb-entry
- ADV-2008-0438 vdb-entry
- 5079 exploit