CVEvulnerability
CVE-2008-0621
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-02-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary code via long arguments to the (1) 0x01, (2) 0x02, (3) 0x03, (4) 0x04, and (5) 0x05 LPD commands.
Affected configurations
• sap sapgui 7.10
• sap saplpd (<= 6.28)
• sap sapsprint
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/28786 Vendor Advisory
- http://secunia.com/advisories/28811 secunia.com
- http://securityreason.com/securityalert/3619 securityreason.com
- http://www.securityfocus.com/archive/1/487508/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/487575/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27613 Exploit
- http://www.securitytracker.com/id?1019300 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/0409 www.vupen.com
- http://www.vupen.com/english/advisories/2008/0438 www.vupen.com
- https://www.exploit-db.com/exploits/5079 www.exploit-db.com
- http://secunia.com/advisories/28786 Vendor Advisory
- http://secunia.com/advisories/28811 secunia.com
- http://securityreason.com/securityalert/3619 securityreason.com
- http://www.securityfocus.com/archive/1/487508/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/487575/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27613 Exploit
- http://www.securitytracker.com/id?1019300 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/0409 www.vupen.com
- http://www.vupen.com/english/advisories/2008/0438 www.vupen.com
- https://www.exploit-db.com/exploits/5079 www.exploit-db.com