CVE-2008-0621

published 2008-02-06

CVE-2008-0621: Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary code via long…

high 7.5 CVSS 3.1

AV N AC L Au N C P I P A P

EXPLOIT

Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary code via long arguments to the (1) 0x01, (2) 0x02, (3) 0x03, (4) 0x04, and (5) 0x05 LPD commands.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
sap	sapgui	—	—
sap	saplpd	<= 6.28	—

CWE-119