CVE-2008-0621

Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary code via long arguments to the 1 0x01, 2 0x02, 3 0x03, 4 0x04, and 5 0x05 LPD commands...

CVE-2008-0621

CVE-2008-0621 is a buffer-overflow vulnerability in SAPlpd (the SAP GUI print server) affecting SAPlpd 6.28 and earlier, included with SAP GUI 7.10 and SAPSprint before 1018. The issue arises when handling LPD commands (notably 0x01, 0x02, 0x03, 0x04, 0x05; related reports mention additional comm...

CVE-2008-0620

SAPlpd (SAPLPD) vulnerability CVE-2008-0620 affects SAPlpd in SAP GUI packages up to version 6.28/7.10 with SAPSprint prior to 1018. The issue arises when handling LPD commands: multiple buffer/overflow conditions are triggered by long parameters for commands 0x01–0x05, 0x31–0x35, potentially all...

CVE-2008-0621

Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary code via long arguments to the 1 0x01, 2 0x02, 3 0x03, 4 0x04, and 5 0x05 LPD commands...

CVE-2008-0620

SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to cause a denial of service crash via a 0x53 LPD command, which causes the server to terminate...

Multiple vulnerabilities in SAPlpd 6.28

Luigi Auriemma Application: SAPlpd http://www.sap.com Versions: = 6.28 included in SAP GUI 7.10 Platforms: Windows Bugs: various vulnerabilities Exploitation: remote Date: 04 Feb 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bugs 3 The Code 4 Fix...

NGS-enjoysap-stack.txt

======= Summary ======= Name: EnjoySAP, SAP GUI for Windows - Stack Overflow Release Date: 5 July 2007 Reference: NGS00483 Discover: Mark Litchfield Vendor: SAP Vendor Reference: SECRES-289 Systems Affected: All Versions Risk: High Status: Fixed ======== TimeLine ======== Discovered: 4 January 20...

Code injection

Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to cause a denial of service process crash via unspecified vectors...

Heap overflow

Heap-based buffer overflow in the rfcguisink.rfcguisink.1 ActiveX control in the EnjoySAP SAP GUI, on systems using ASCII versions, allows remote attackers to execute arbitrary code via a long first argument to the LaunchGui function...

CVE-2007-3607

Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to cause a denial of service process crash via unspecified vectors...

CVE-2007-3606

Heap-based buffer overflow in the rfcguisink.rfcguisink.1 ActiveX control in the EnjoySAP SAP GUI, on systems using ASCII versions, allows remote attackers to execute arbitrary code via a long first argument to the LaunchGui function...

CVE-2007-3608

Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to create certain files via unspecified vectors...

Stack overflow

Stack-based buffer overflow in the kweditcontrol.kwedit.1 ActiveX control in FrontEnd\SapGui\kwedit.dll in the EnjoySAP SAP GUI allows remote attackers to execute arbitrary code via a long argument to the PrepareToPostHTML function...

CVE-2007-3605

Stack-based buffer overflow in the kweditcontrol.kwedit.1 ActiveX control in FrontEnd\SapGui\kwedit.dll in the EnjoySAP SAP GUI allows remote attackers to execute arbitrary code via a long argument to the PrepareToPostHTML function...

Code injection

Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to create certain files via unspecified vectors...

CVE-2007-3607

Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to cause a denial of service process crash via unspecified vectors...

CVE-2007-3605

Stack-based buffer overflow in the kweditcontrol.kwedit.1 ActiveX control in FrontEnd\SapGui\kwedit.dll in the EnjoySAP SAP GUI allows remote attackers to execute arbitrary code via a long argument to the PrepareToPostHTML function...

CVE-2007-3606

CVE-2007-3606 affects EnjoySAP SAP GUI’s rfcguisink.rfcguisink.1 ActiveX control on ASCII versions. The vulnerability is a heap-based buffer overflow triggered by a long first argument to the LaunchGui function, allowing remote code execution. Connected sources confirm the heap overflow in this A...

CVE-2007-3605

CVE-2007-3605 is a stack-based buffer overflow in SAP GUI’s EnjoySAP KWEdit ActiveX (kwedit.dll) that allows remote code execution via a too-long argument to PrepareToPostHTML. Public references mention kwedit.dll (version 6400.1.1.41 in the Metasploit module) and an exploit presence (Exploit-DB ...

CVE-2007-3607

Technical details of CVE-2007-3607 are not publicly provided in the supplied documents. Only a generic description of unspecified ActiveX control vulnerabilities affecting EnjoySAP SAP GUI is available; monitor for official updates.