Lucene search

[email protected]CVE-2008-1303

HistoryMar 12, 2008 - 5:44 p.m.

CVE-2008-1303

2008-03-1217:44:00

CWE-20

[email protected]

web.nvd.nist.gov

perforce

p4s.exe

denial of service

remote attackers

cve-2008-1303

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.8 Medium

AI Score

Confidence

High

0.091 Low

EPSS

Percentile

94.7%

JSON

The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon crash) via a missing parameter to the (1) dm-FaultFile, (2) dm-LazyCheck, (3) dm-ResolvedFile, (4) dm-OpenFile, (5) crypto, and possibly unspecified other commands, which triggers a NULL pointer dereference.

Affected configurations

NVD

Node

perforceperforce_serverRange≤2007.3_143793

perforceperforce_serverMatch2000.1

perforceperforce_serverMatch2000.2

perforceperforce_serverMatch2001.1

perforceperforce_serverMatch2001.2

perforceperforce_serverMatch2002.1

perforceperforce_serverMatch2002.2

perforceperforce_serverMatch2003.1

perforceperforce_serverMatch2003.2

perforceperforce_serverMatch2004.2

perforceperforce_serverMatch2005.1

perforceperforce_serverMatch2005.2

perforceperforce_serverMatch2006.1

perforceperforce_serverMatch2006.2

perforceperforce_serverMatch2007.2

perforceperforce_serverMatch2007.3

CPENameOperatorVersion
perforce:perforce_serverperforce perforce serverle2007.3_143793
perforce:perforce_serverperforce perforce servereq2000.1
perforce:perforce_serverperforce perforce servereq2000.2
perforce:perforce_serverperforce perforce servereq2001.1
perforce:perforce_serverperforce perforce servereq2001.2
perforce:perforce_serverperforce perforce servereq2002.1
perforce:perforce_serverperforce perforce servereq2002.2
perforce:perforce_serverperforce perforce servereq2003.1
perforce:perforce_serverperforce perforce servereq2003.2
perforce:perforce_serverperforce perforce servereq2004.2

CPE	Name	Operator	Version
perforce:perforce_server	perforce perforce server	le	2007.3_143793
perforce:perforce_server	perforce perforce server	eq	2000.1
perforce:perforce_server	perforce perforce server	eq	2000.2
perforce:perforce_server	perforce perforce server	eq	2001.1
perforce:perforce_server	perforce perforce server	eq	2001.2
perforce:perforce_server	perforce perforce server	eq	2002.1
perforce:perforce_server	perforce perforce server	eq	2002.2
perforce:perforce_server	perforce perforce server	eq	2003.1
perforce:perforce_server	perforce perforce server	eq	2003.2
perforce:perforce_server	perforce perforce server	eq	2004.2

Rows per page:

1-10 of 161

References

aluigi.altervista.org/adv/perforces-adv.txt

aluigi.org/poc/perforces.zip

secunia.com/advisories/29231

securityreason.com/securityalert/3735

www.securityfocus.com/archive/1/489179/100/0/threaded

www.securityfocus.com/bid/28108

exchange.xforce.ibmcloud.com/vulnerabilities/41015

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.8 Medium

AI Score

Confidence

High

0.091 Low

EPSS

Percentile

94.7%

JSON

Related for CVE-2008-1303

prion1 cvelist1 nvd1