CyberSec.Space Logo
Back to CVE Browser

CVE-2008-0620

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0360%
EPSS Percentile7.57th
PublishedFeb 6, 2008
Last ModifiedApr 23, 2026

Vulnerability Description

SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to cause a denial of service (crash) via a 0x53 LPD command, which causes the server to terminate.

Affected Platforms (CPE)

📦
Sap

Sapgui

= 7.10
📦
Sap

Saplpd

<= 6.28
📦
Sap

Sapsprint

All versions

References & Advisories

🔗 http://secunia.com/advisories/28786
🔗 http://secunia.com/advisories/28811
🔗 http://securityreason.com/securityalert/3619
🔗 http://www.securityfocus.com/archive/1/487508/100/0/threaded
🔗 http://www.securityfocus.com/archive/1/487575/100/0/threaded
🔗 http://www.securityfocus.com/bid/27613
🔗 http://www.securitytracker.com/id?1019300
🔗 http://www.vupen.com/english/advisories/2008/0409

Related Vulnerabilities

CVE-2016-98329.9

PricewaterhouseCoopers (PwC) ACE-ABAP 8.10.304 for SAP Security allows remote authenticated users to conduct ABAP injection attack...

CVE-2007-44759.3

Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Level 9 allows...

CVE-2008-43879.3

Unspecified vulnerability in the Simba MDrmSap ActiveX control in mdrmsap.dll in SAP SAPgui allows remote attackers to execute arb...

CVE-2007-36057.6

Stack-based buffer overflow in the kweditcontrol.kwedit.1 ActiveX control in FrontEnd\SapGui\kwedit.dll in the EnjoySAP SAP GUI al...