CVE-2008-0621
SAPLPD < 6.28 - Remote Code Execution via Long LPD Command Arguments
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2008-0621.
PoCs published by Metasploit, BackBone, including Metasploit module exploits/windows/lpd/saplpd.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in SAP SAPLPD 6.28 by sending an overly long argument to execute arbitrary code. It uses a Metasploit module to deliver a payload and achieve remote code execution.
Description
Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary code via long arguments to the (1) 0x01, (2) 0x02, (3) 0x03, (4) 0x04, and (5) 0x05 LPD commands.
Exploits (3)
This exploit targets a stack buffer overflow in SAP SAPLPD 6.28 by sending an overly long argument to execute arbitrary code. It uses a Metasploit module to deliver a payload and achieve remote code execution.
This exploit targets a buffer overflow vulnerability in SAPLPD 6.28 for Windows/NT. It sends a crafted payload to trigger a bind shell on the target system, allowing remote code execution.
This Metasploit module exploits a stack buffer overflow in SAP SAPLPD 6.28 by sending an overly long argument to execute arbitrary code. It includes a payload encoder, stack adjustment, and a specific return address for the target version.