{"id":"CVE-2008-0621","aliases":["EUVD-2008-0631","GHSA-ggfh-c25x-c875"],"status":"published","title":"Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018...","description":"Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary code via long arguments to the (1) 0x01, (2) 0x02, (3) 0x03, (4) 0x04, and (5) 0x05 LPD commands.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.73359,"percentile":0.99466,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-119"],"published":"2008-02-06T11:00:00Z","modified":"2026-06-16T22:50:00Z","exploits":[{"source":"exploitdb","id":"EDB-16338","title":"SapLPD 6.28 - Remote Buffer Overflow (Metasploit)","type":"remote","platform":"windows","date":"2010-05-09","verified":true,"url":"https://www.exploit-db.com/exploits/16338"},{"source":"exploitdb","id":"EDB-5079","title":"SapLPD 6.28 (Windows x86) - Remote Buffer Overflow","type":"remote","platform":"windows_x86","date":"2008-02-07","verified":true,"url":"https://www.exploit-db.com/exploits/5079"},{"source":"metasploit","id":"exploit/windows/lpd/saplpd","title":"SAP SAPLPD 6.28 Buffer Overflow","type":"exploit","platform":"Windows","date":"2008-02-04","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/lpd/saplpd"}],"products":[{"vendor":"sap","product":"sapgui"},{"vendor":"sap","product":"saplpd"},{"vendor":"sap","product":"sapsprint"}],"references":[{"url":"http://secunia.com/advisories/28786","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/487575/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2008/0409","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://www.securitytracker.com/id?1019300","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://securityreason.com/securityalert/3619","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/487508/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2008/0438","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://secunia.com/advisories/28811","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.securityfocus.com/bid/27613","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"https://www.exploit-db.com/exploits/5079","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-0621"},{"url":"https://github.com/advisories/GHSA-ggfh-c25x-c875"}],"sources":{"cve":[{"id":"CVE-2008-0621","description":"Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary code via long arguments to the (1) 0x01, (2) 0x02, (3) 0x03, (4) 0x04, and (5) 0x05 LPD commands.","status":"published","published":"2008-02-06T11:00:00Z","modified":"2024-08-07T07:54:23.07Z","updated_at":"2026-11-02T14:34:48.867091Z"}],"euvd":[{"id":"EUVD-2008-0631","description":"Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary code via long arguments to the (1) 0x01, (2) 0x02, (3) 0x03, (4) 0x04, and (5) 0x05 LPD commands.","status":"published","published":"2008-02-06T11:00:00Z","modified":"2024-08-07T07:54:23Z","updated_at":"2026-11-03T01:39:04.792524Z"}],"ghsa":[{"id":"GHSA-ggfh-c25x-c875","title":"Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018...","description":"Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary code via long arguments to the (1) 0x01, (2) 0x02, (3) 0x03, (4) 0x04, and (5) 0x05 LPD commands.","status":"published","published":"2022-05-01T23:31:53Z","modified":"2023-01-31T05:06:08Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:48:58.612773Z"}],"nvd":[{"id":"CVE-2008-0621","description":"Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary code via long arguments to the (1) 0x01, (2) 0x02, (3) 0x03, (4) 0x04, and (5) 0x05 LPD commands.","status":"published","published":"2008-02-06T12:00:00Z","modified":"2026-06-16T22:50:00.663Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:01:24.89535Z"}]}}