CVE-2008-0621

{"id": "CVE-2008-0621", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2008-02-06T12:00:00.000", "references": [{"url": "http://secunia.com/advisories/28786", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/28811", "source": "cve@mitre.org"}, {"url": "http://securityreason.com/securityalert/3619", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/487508/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/487575/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/27613", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id?1019300", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2008/0409", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2008/0438", "source": "cve@mitre.org"}, {"url": "https://www.exploit-db.com/exploits/5079", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary code via long arguments to the (1) 0x01, (2) 0x02, (3) 0x03, (4) 0x04, and (5) 0x05 LPD commands."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer en SAPLPD 6.28 y anteriores incluidas en SAP GUI 7.10 y SAPSprint antes de 1018. Permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de argumentos largos a los comandos 1) 0x01, (2) 0x02, (3) 0x03, (4) 0x04 y (5) 0x05 LPD."}], "lastModified": "2018-10-15T22:02:15.367", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sap:sapgui:7.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BCEAAEEF-62DE-4BDD-846A-EA746FC4AADC"}, {"criteria": "cpe:2.3:a:sap:saplpd:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F9C73A3-56A4-41C3-895A-4D49608B2946", "versionEndIncluding": "6.28"}, {"criteria": "cpe:2.3:a:sap:sapsprint:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ADF65E3D-45F1-4491-8532-B5BE4F6CD2E4"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}