What’s Vulnerable › Vulnerabilities

CVE-2008-0621

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 73.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2008-02-06 · updated 2026-06-16
• Weakness: CWE-119

Description

Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary code via long arguments to the (1) 0x01, (2) 0x02, (3) 0x03, (4) 0x04, and (5) 0x05 LPD commands.

Affected products

• Sapgui: 7.10
• Saplpd: through 6.28
• Sapsprint: all versions

References

• http://secunia.com/advisories/28786
• http://secunia.com/advisories/28811
• http://securityreason.com/securityalert/3619
• http://www.securityfocus.com/archive/1/487508/100/0/threaded
• http://www.securityfocus.com/archive/1/487575/100/0/threaded
• http://www.securityfocus.com/bid/27613
• http://www.securitytracker.com/id?1019300
• http://www.vupen.com/english/advisories/2008/0409
• http://www.vupen.com/english/advisories/2008/0438
• https://www.exploit-db.com/exploits/5079
• http://secunia.com/advisories/28786
• http://secunia.com/advisories/28811

Get alerted when CVE-2008-0621 or the next vulnerability affects your stack