|
SAP GUI SAPLPD Multiple Vulnerabilities
|
|
Secunia Advisory:
|
SA28786
|
|
|
Release Date:
|
2008-02-05
|
|
Last Update:
|
2008-02-07
|
|
Popularity:
|
8,009 views
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
DoS
System access
|
|
Where:
|
From local network
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | SAP GUI 6.x
SAP GUI 7.x
|
|
|
Binary Analysis:
|
BA382 :: Available for 1 Credit 
BA387 :: Available for 1 Credit
BA388 :: Available for 1 Credit
BA389 :: Available for 1 Credit
BA391 :: Available for 1 Credit
BA392 :: Available for 1 Credit
BA394 :: Available for 1 Credit
BA395 :: Available for 1 Credit
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| CVE reference: | CVE-2008-0620
CVE-2008-0621
|
|
Description:
Luigi Auriemma has discovered some vulnerabilities in SAP GUI, which can be exploited by malicious people to cause a DoS (Denial of Service) or to potentially compromise a vulnerable system.
1) Multiple boundary errors exist in the SAPLPD server when processing LPD commands. This can be exploited to cause buffer overflows via overly long arguments passed to the LPD commands having the following codes: 0x01, 0x02, 0x03, 0x04, 0x05, 0x31, 0x32, 0x33, 0x34, and 0x35.
Successful exploitation may allow execution of arbitrary code.
2) An error in SAPLPD when processing the 0x53 LPD command code can be exploited to terminate an affected server.
The vulnerabilities are confirmed in SAPLPD version 6.28.0.1 included in SAP GUI versions 6.40 Patchlevel 29 and 7.10. Other versions may also be affected.
Solution:
Update to the latest versions.
* SAP GUI for Windows 6.20 - Patchlevel 72
* SAP GUI for Windows 6.40 - Patchlevel 30
* SAP GUI for Windows 7.10 - Patchlevel 6
Provided and/or discovered by:
Luigi Auriemma
Changelog:
2008-02-06: Added information about version 6.x also being affected. Updated "Solution" section.
2008-02-07: Added CVE reference.
Original Advisory:
http://aluigi.altervista.org/adv/saplpdz-adv.txt
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
