← back
CVE-2008-0621

CVE-2008-0621

60Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 73%
from disclosure to weapon823 days
Published on NVDFeb 6
1st PoC+823d
metasploitFeb 4
exploitation probability
73%top 1% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary code via long arguments to the (1) 0x01, (2) 0x02, (3) 0x03, (4) 0x04, and (5) 0x05 LPD commands.
Affected products
n/a · n/a
public PoCs found — 2✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16338cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/5079
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://secunia.com/advisories/28786http://secunia.com/advisories/28811http://securityreason.com/securityalert/3619https://www.exploit-db.com/exploits/5079http://www.securityfocus.com/archive/1/487508/100/0/threadedhttp://www.securityfocus.com/archive/1/487575/100/0/threadedhttp://www.securityfocus.com/bid/27613http://www.securitytracker.com/id?1019300http://www.vupen.com/english/advisories/2008/0409http://www.vupen.com/english/advisories/2008/0438