CVE-2008-0621

Currently unrated

Key Information:

Vendor
SAP
Status
SAPgui
SAPlpd
SAPsprint
Vendor
CVE Published:
6 February 2008

Summary

Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary code via long arguments to the (1) 0x01, (2) 0x02, (3) 0x03, (4) 0x04, and (5) 0x05 LPD commands.

References

http://secunia.com/advisories/28786
third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/487575/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.vupen.com/english/advisories/2008/0409
vdb-entryx_refsource_VUPEN

EPSS Score

93% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.