CVE-2008-0620

SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to cause a denial of service (crash) via a 0x53 LPD command…

published February 6, 2008

CVSS
—
EPSS
3%
Percentile
88.4
In the wild
Unconfirmed
What it is

⚠️ A cheeky 0x53 LPD command can unexpectedly crash your SAP server, bringing operations to a standstill! Think of it like a delivery service that, upon receiving a specific package type, panicked and decided to shut down instead of carrying on with its work — not exactly the best way to stay in business! 📦 If exploited, this could lead to service interruption, leaving users unable to access critical functionalities. While the severity is listed as unknown, a denial of service can be absolutely devastating when your operations rely on seamless service.

Put simply

Think of it like a delivery service that, upon receiving a specific package type, panicked and decided to shut down instead of carrying on with its work — not exactly the best way to stay in business! 📦 This vulnerability in SAPLPD 6.28 and earlier allows remote attackers to send a malicious LPD command (0x53), causing the server to crash unexpectedly.

What to do

If exploited, this could lead to service interruption, leaving users unable to access critical functionalities. While the severity is listed as unknown, a denial of service can be absolutely devastating when your operations rely on seamless service. To protect against this, upgrade to SAPLPD version 6.29 or later. Additionally, consider monitoring logs for unusual LPD command traffic and implementing network controls to restrict access. You've got this! Follow these steps, and you'll be back to smooth sailing in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03315 · 88.4th percentile
Published
2008-02-06T11:00Z
EPSS history
Timeline
  • 06 FEB 11:00Z
    SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to cause a denial of service (crash) via a 0x53 LPD command…
    cvelistv5