NetSight
IP …
medium5.0Public exploit code

CVE-2008-1303

The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon crash) via a missing p…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon crash) via a missing parameter to the (1) dm-FaultFile, (2) dm-LazyCheck, (3) dm-ResolvedFile, (4) dm-OpenFile, (5) crypto, and possibly unspecified other commands, which triggers a NULL pointer dereference.

Affected products

VendorProductAffected versions
PerforcePerforce Server
through 2007.3_143793
Versions 2000.1, 2000.2, 2001.1, 2001.2, 2002.1

Weakness classification

CWE-20

References