Perforce Server 2007.3 - Multiple Remote Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/28108/info Perforce Server is prone to multiple remote denial-of-service vulnerabilities. An attacker can exploit these issues to crash the affected application or cause excessive memory to be consumed, denying service to legitimate users. These issues...

Perforce Server Detection

The remote service is a Perforce server. Perforce is a commercial, proprietary revision control system, and a Perforce server manages a central database to track file versions and user activity. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Design/Logic Flaw

P4Webs.exe in Perforce P4Web 2006.2 and earlier, when running on Windows, allows remote attackers to cause a denial of service CPU consumption via an HTTP request with an empty body and a Content-Length greater than 0...

CVE-2007-6349

P4Webs.exe in Perforce P4Web 2006.2 and earlier, when running on Windows, allows remote attackers to cause a denial of service CPU consumption via an HTTP request with an empty body and a Content-Length greater than 0...

CVE-2007-6349

P4Webs.exe in Perforce P4Web 2006.2 and earlier, when running on Windows, allows remote attackers to cause a denial of service CPU consumption via an HTTP request with an empty body and a Content-Length greater than 0...

CVE-2007-6349

CVE-2007-6349 affects Perforce P4Web 2006.2 and earlier on Windows. The issue is a denial-of-service caused by a crafted HTTP request with a non-empty Content-Length but an empty body, which drives P4Webs.exe to consume up to high CPU usage remotely (no authentication required). The Symantec advi...

CVE-2007-6349: Undefined Security Weakness

P4Webs.exe in Perforce P4Web 2006.2 and earlier, when running on Windows, allows remote attackers to cause a denial of service CPU consumption via an HTTP request with an empty body and a Content-Length greater than 0...

SYMSA-2007-015

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-015 Advisory Title: Perforce P4Web Denial Of Service through resource starvation Author: Oliver Karow / [email protected] Release Date: 1...

Perforce revision control system DoS

HTTP request with empty boy and non-zero Content-Length causes CPU exhaustion...

Design/Logic Flaw

The Perforce client does not restrict the set of files that it overwrites upon receiving a request from the server, which allows remote attackers to overwrite arbitrary files by modifying the client config file on the server, or by operating a malicious server...

CVE-2007-0100

The Perforce client does not restrict the set of files that it overwrites upon receiving a request from the server, which allows remote attackers to overwrite arbitrary files by modifying the client config file on the server, or by operating a malicious server...

CVE-2007-0100

The Perforce client does not restrict the set of files that it overwrites upon receiving a request from the server, which allows remote attackers to overwrite arbitrary files by modifying the client config file on the server, or by operating a malicious server...

CVE-2007-0100

The CVE-2007-0100 entry describes a vulnerability in the Perforce client where the client does not restrict the set of files it overwrites after receiving a server request. The root cause is that the client can overwrite arbitrary files if the server or a malicious server is used, by modifying th...

CVE-2007-0100: Undefined Security Weakness

The Perforce client does not restrict the set of files that it overwrites upon receiving a request from the server, which allows remote attackers to overwrite arbitrary files by modifying the client config file on the server, or by operating a malicious server...

Perforce client insecure design

Server has full control under client...

Perforce client: security hole by design

= Abstract = The Perforce client has a huge gapping security hole by design. It totally trusts the Perforce server and does whatever the server tells it, writing arbitrary files. = Disclaimer = This is so terribly obvious that I'd be surprised that this is news, but I couldn't find anything. Or I...