Denial of Service Vulnerability in Perforce Server by Perforce
CVE-2010-0930

Currently unrated

Key Information:

Vendor

Perforce

Status
Perforce Server
Vendor
CVE Published:
5 March 2010

What is CVE-2010-0930?

The Perforce service (p4s.exe) in Perforce Server 2008.1 is susceptible to a denial of service attack. Remote attackers can exploit this vulnerability by sending specially crafted data that includes a specific byte sequence (0xdc, 0xff, 0xff, and 0xff) positioned just before the client protocol version number. This scenario can lead to an infinite loop, resulting in the service becoming unresponsive.

References

http://www.securityfocus.com/bid/36261
vdb-entryx_refsource_BID
http://lists.immunitysec.com/pipermail/dailydave/2010-Mar...
mailing-listx_refsource_MLIST

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.