{"api_version":"1","generated_at":"2026-07-23T09:12:46+00:00","cve":"CVE-2008-0621","urls":{"html":"https://cve.report/CVE-2008-0621","api":"https://cve.report/api/cve/CVE-2008-0621.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-0621","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-0621"},"summary":{"title":"CVE-2008-0621","description":"Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary code via long arguments to the (1) 0x01, (2) 0x02, (3) 0x03, (4) 0x04, and (5) 0x05 LPD commands.","state":"PUBLISHED","assigner":"mitre","published_at":"2008-02-06 12:00:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-119","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.securitytracker.com/id?1019300","name":"http://www.securitytracker.com/id?1019300","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityTracker.com Archives - SAPlpd Memory Corruption Bugs Let Remote Users Execute Arbitrary Code","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/487575/100/0/threaded","name":"http://www.securityfocus.com/archive/1/487575/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2008/0438","name":"http://www.vupen.com/english/advisories/2008/0438","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/487508/100/0/threaded","name":"http://www.securityfocus.com/archive/1/487508/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.exploit-db.com/exploits/5079","name":"https://www.exploit-db.com/exploits/5079","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SapLPD 6.28 Remote Buffer Overflow Exploit (win32)","mime":"text/x-c","httpstatus":"200","archivestatus":"200"},{"url":"http://securityreason.com/securityalert/3619","name":"http://securityreason.com/securityalert/3619","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Multiple vulnerabilities in SAPlpd 6.28 - CXSecurity.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2008/0409","name":"http://www.vupen.com/english/advisories/2008/0409","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/28811","name":"http://secunia.com/advisories/28811","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SAP SAPSprint Multiple Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/27613","name":"http://www.securityfocus.com/bid/27613","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"SAPlpd and SAPSprint Multiple Remote Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://secunia.com/advisories/28786","name":"http://secunia.com/advisories/28786","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"SAP GUI SAPLPD Multiple Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-0621","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-0621","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"621","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sap","cpe5":"sapgui","cpe6":"7.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"621","vulnerable":"1","versionEndIncluding":"6.28","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sap","cpe5":"saplpd","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"621","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sap","cpe5":"sapsprint","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T07:54:23.070Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"28786","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/28786"},{"name":"20080205 Re: Multiple vulnerabilities in SAPlpd 6.28","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/487575/100/0/threaded"},{"name":"ADV-2008-0409","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2008/0409"},{"name":"1019300","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1019300"},{"name":"3619","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/3619"},{"name":"20080204 Multiple vulnerabilities in SAPlpd 6.28","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/487508/100/0/threaded"},{"name":"ADV-2008-0438","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2008/0438"},{"name":"28811","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/28811"},{"name":"27613","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/27613"},{"name":"5079","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/5079"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-02-04T00:00:00.000Z","descriptions":[{"lang":"en","value":"Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary code via long arguments to the (1) 0x01, (2) 0x02, (3) 0x03, (4) 0x04, and (5) 0x05 LPD commands."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-15T20:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"28786","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/28786"},{"name":"20080205 Re: Multiple vulnerabilities in SAPlpd 6.28","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/487575/100/0/threaded"},{"name":"ADV-2008-0409","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2008/0409"},{"name":"1019300","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1019300"},{"name":"3619","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/3619"},{"name":"20080204 Multiple vulnerabilities in SAPlpd 6.28","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/487508/100/0/threaded"},{"name":"ADV-2008-0438","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2008/0438"},{"name":"28811","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/28811"},{"name":"27613","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/27613"},{"name":"5079","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/5079"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2008-0621","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary code via long arguments to the (1) 0x01, (2) 0x02, (3) 0x03, (4) 0x04, and (5) 0x05 LPD commands."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"28786","refsource":"SECUNIA","url":"http://secunia.com/advisories/28786"},{"name":"20080205 Re: Multiple vulnerabilities in SAPlpd 6.28","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/487575/100/0/threaded"},{"name":"ADV-2008-0409","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2008/0409"},{"name":"1019300","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1019300"},{"name":"3619","refsource":"SREASON","url":"http://securityreason.com/securityalert/3619"},{"name":"20080204 Multiple vulnerabilities in SAPlpd 6.28","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/487508/100/0/threaded"},{"name":"ADV-2008-0438","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2008/0438"},{"name":"28811","refsource":"SECUNIA","url":"http://secunia.com/advisories/28811"},{"name":"27613","refsource":"BID","url":"http://www.securityfocus.com/bid/27613"},{"name":"5079","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/5079"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2008-0621","datePublished":"2008-02-06T11:00:00.000Z","dateReserved":"2008-02-05T00:00:00.000Z","dateUpdated":"2024-08-07T07:54:23.070Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2008-02-06 12:00:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-119","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sapgui:7.10:*:*:*:*:*:*:*","matchCriteriaId":"BCEAAEEF-62DE-4BDD-846A-EA746FC4AADC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:saplpd:*:*:*:*:*:*:*:*","versionEndIncluding":"6.28","matchCriteriaId":"7F9C73A3-56A4-41C3-895A-4D49608B2946"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sapsprint:*:*:*:*:*:*:*:*","matchCriteriaId":"ADF65E3D-45F1-4491-8532-B5BE4F6CD2E4"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"621","Ordinal":"1","Title":"CVE-2008-0621","CVE":"CVE-2008-0621","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"621","Ordinal":"1","NoteData":"Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary code via long arguments to the (1) 0x01, (2) 0x02, (3) 0x03, (4) 0x04, and (5) 0x05 LPD commands.","Type":"Description","Title":"CVE-2008-0621"},{"CveYear":"2008","CveId":"621","Ordinal":"2","NoteData":"2008-02-06","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"621","Ordinal":"3","NoteData":"2018-10-15","Type":"Other","Title":"Modified"}]}}}