CVE-2010-0935 Information

Description

Perforce Server 2009.2 and earlier when the protection table is empty allows remote authenticated users to obtain super privileges via a \p4 protect\ command.

Reference

http://lists.immunitysec.com/pipermail/dailydave/2010-March/006063.html http://www.perforce.com/perforce/doc.current/manuals/cmdref/protect.html http://www.securityfocus.com/bid/36261

Share on: