Directory Traversal Vulnerability in Perforce Server 2008.1
CVE-2010-0933

Currently unrated

Key Information:

Vendor

Perforce

Status
Perforce Server
Vendor
CVE Published:
5 March 2010

What is CVE-2010-0933?

A directory traversal vulnerability exists in Perforce Server 2008.1, which allows remote authenticated users to manipulate the file system by exploiting the 'p4 add' command. By including a '..' (dot dot) in the command's argument, an attacker can create arbitrary files on the server, potentially leading to unauthorized access or further exploitation of the system.

References

http://www.securityfocus.com/bid/36261
vdb-entryx_refsource_BID
http://lists.immunitysec.com/pipermail/dailydave/2010-Mar...
mailing-listx_refsource_MLIST

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.