Secunia Logo
Netsikker nu! 2008
 
SAP GUI SAPLPD Multiple Vulnerabilities
Secunia Advisory: SA28786
Release Date: 2008-02-05
Last Update: 2008-02-07
Popularity: 8,009 views

Critical:
Moderately critical
Impact: DoS
System access
Where: From local network
Solution Status: Vendor Patch

Software:SAP GUI 6.x
SAP GUI 7.x

Binary Analysis: BA382 :: Available for 1 Credit
BA387 :: Available for 1 Credit
BA388 :: Available for 1 Credit
BA389 :: Available for 1 Credit
BA391 :: Available for 1 Credit
BA392 :: Available for 1 Credit
BA394 :: Available for 1 Credit
BA395 :: Available for 1 Credit

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2008-0620
CVE-2008-0621


Description:
Luigi Auriemma has discovered some vulnerabilities in SAP GUI, which can be exploited by malicious people to cause a DoS (Denial of Service) or to potentially compromise a vulnerable system.

1) Multiple boundary errors exist in the SAPLPD server when processing LPD commands. This can be exploited to cause buffer overflows via overly long arguments passed to the LPD commands having the following codes: 0x01, 0x02, 0x03, 0x04, 0x05, 0x31, 0x32, 0x33, 0x34, and 0x35.

Successful exploitation may allow execution of arbitrary code.

2) An error in SAPLPD when processing the 0x53 LPD command code can be exploited to terminate an affected server.

The vulnerabilities are confirmed in SAPLPD version 6.28.0.1 included in SAP GUI versions 6.40 Patchlevel 29 and 7.10. Other versions may also be affected.

Solution:
Update to the latest versions.

* SAP GUI for Windows 6.20 - Patchlevel 72
* SAP GUI for Windows 6.40 - Patchlevel 30
* SAP GUI for Windows 7.10 - Patchlevel 6

Provided and/or discovered by:
Luigi Auriemma

Changelog:
2008-02-06: Added information about version 6.x also being affected. Updated "Solution" section.
2008-02-07: Added CVE reference.

Original Advisory:
http://aluigi.altervista.org/adv/saplpdz-adv.txt


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Today
New advisories: 17
New vulnerabilities: 55
Updated advisories: 60

Moderately // 87 views
Debian update for squid
Less // 99 views
SUSE update for mercurial
Moderately // 118 views
SUSE update for openssh
Less // 106 views
Fedora update for mediawiki

Solutions | More...  


Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. SUSE update for openssh // 108 views
2. SUSE update for mercurial // 91 views
3. Fedora update for mediawiki // 87 views
4. SUSE update for dovecot and graphicsmagic // 83 views
5. Debian update for squid // 79 views
6. Juniper Products Neighbor Discovery Protocol Neighbor Solicitation Vulnerability // 71 views
7. CMME Information Disclosure Security Issues // 69 views
8. HP-UX NFS/ONCplus Denial of Service Vulnerability // 60 views
9. noName CMS "index.php" SQL Injection Vulnerabilities // 60 views
10. IBM Lotus Quickr Security Issues and Denial of Service // 53 views