What’s Vulnerable › Vulnerabilities

CVE-2008-0620

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2008-02-06 · updated 2026-06-16
• Weakness: CWE-119

Description

SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to cause a denial of service (crash) via a 0x53 LPD command, which causes the server to terminate.

Affected products

• Sapgui: 7.10
• Saplpd: through 6.28
• Sapsprint: all versions

References

• http://secunia.com/advisories/28786
• http://secunia.com/advisories/28811
• http://securityreason.com/securityalert/3619
• http://www.securityfocus.com/archive/1/487508/100/0/threaded
• http://www.securityfocus.com/archive/1/487575/100/0/threaded
• http://www.securityfocus.com/bid/27613
• http://www.securitytracker.com/id?1019300
• http://www.vupen.com/english/advisories/2008/0409
• http://www.vupen.com/english/advisories/2008/0438
• http://secunia.com/advisories/28786
• http://secunia.com/advisories/28811
• http://securityreason.com/securityalert/3619

Get alerted when CVE-2008-0620 or the next vulnerability affects your stack