medium4.6
CVE-2010-0935
Perforce Server 2009.2 and earlier, when the protection table is empty, allows remote authenticated users to obtain super privileges via a "p4 protect" command.
Impact
Perforce Server 2009.2 and earlier, when the protection table is empty, allows remote authenticated users to obtain super privileges via a "p4 protect" command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Perforce | Perforce Server | through 2009.2 Versions 97.3, 98.2, 99.1, 99.2, 2000.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.immunitysec.com/pipermail/dailydave/2010-March/006063.html
- http://www.perforce.com/perforce/doc.current/manuals/cmdref/protect.html
- http://www.securityfocus.com/bid/36261
- http://lists.immunitysec.com/pipermail/dailydave/2010-March/006063.html
- http://www.perforce.com/perforce/doc.current/manuals/cmdref/protect.html
- http://www.securityfocus.com/bid/36261