CVE-2008-0621

Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary code via long arguments to the (1) 0x01, (2) 0x02, (3) 0x03, (4) 0x04, and (5) 0x05 LPD commands.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

73.36% chance of exploitation in the next 30 days, 99th percentile

Published

2008-02-06

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/lpd/saplpd.rb

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/16338
• https://www.exploit-db.com/exploits/5079

References

• CVE Record
• NVD entry

Related

• CVE-2008-0619
• CVE-2008-0623
• CVE-2008-0617
• CVE-2008-0624
• CVE-2008-0616
• CVE-2008-0625