ID CVE-2010-0930
Summary The Perforce service (p4s.exe) in Perforce Server 2008.1 allows remote attackers to cause a denial of service (infinite loop) via crafted data that includes a byte sequence of 0xdc, 0xff, 0xff, and 0xff immediately before the client protocol version number.
References
Vulnerable Configurations
  • cpe:2.3:a:perforce:perforce_server:2008.1:*:*:*:*:*:*:*
    cpe:2.3:a:perforce:perforce_server:2008.1:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 08-03-2010 - 05:00)
Impact:
Exploitability:
CWE CWE-399
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
bid 36261
mlist [dailydave] 20100304 Perforce
Last major update 08-03-2010 - 05:00
Published 05-03-2010 - 19:30
Last modified 08-03-2010 - 05:00
Back to Top