SAPLPD/SAPSPRINT Unspecified Print Job Denial of Service Vulnerability

Bugtraq ID:	19756
Class:	Unknown
CVE:	CVE-2006-7220
Remote:	Yes
Local:	No
Published:	Aug 29 2006 12:00AM
Updated:	Jul 06 2016 02:40PM
Credit:	Esteban Abeledo [email protected] is credited with the discovery of this vulnerability.
Vulnerable:	SAP SAPSPRINT 6 SAP SAPSPRINT 0 SAP SAPLPD 0
Not Vulnerable:	SAP SAPSPRINT 9 SAP SAPSPRINT 1018

SAPLPD/SAPSPRINT Unspecified Print Job Denial of Service Vulnerability

SAPLPD and SAPSPRINT are prone to a denial-of-service vulnerability because the applications fail to handle a specially formatted print job request.

Successful exploits of this vulnerability will cause the applications to crash, effectively denying service to legitimate users.

SAPLPD/SAPSPRINT Unspecified Print Job Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

SAPLPD/SAPSPRINT Unspecified Print Job Denial of Service Vulnerability

Solution:
This issue has been addressed in SAPSPRINT patch 9 and above; specifically, 'xSPrint_9-10001615.exe' is reported to address this issue. SAPLPD is still reported to be affected. Please contact the vendor for information on obtaining and applying appropriate fixes.

SAPLPD/SAPSPRINT Unspecified Print Job Denial of Service Vulnerability

References:

• Vendor Homepage (SAP)