CVE-2008-0620

SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to cause a denial of service (crash) via a 0x53 LPD command, which causes the server to terminate.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2008-02-06

Last modified

2024-08-07

Weaknesses

CWE-119

Affected products

• Sapgui (Sap)
• Saplpd (Sap)
• Sapsprint (Sap)

References

• http://secunia.com/advisories/28786
• http://secunia.com/advisories/28811
• http://securityreason.com/securityalert/3619
• http://www.securityfocus.com/archive/1/487508/100/0/threaded
• http://www.securityfocus.com/archive/1/487575/100/0/threaded
• http://www.securityfocus.com/bid/27613
• http://www.securitytracker.com/id?1019300
• http://www.vupen.com/english/advisories/2008/0409
• http://www.vupen.com/english/advisories/2008/0438