CVE-2008-1338

概要

参考情報

• aluigi.altervista.org/adv/perforces-adv.txt
• aluigi.org/poc/perforces.zip
• secunia.com/advisories/29231 · Vendor Advisory
• securityreason.com/securityalert/3735
• securityfocus.com/archive/1/489179/100/0/threaded
• securityfocus.com/bid/28108 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/41017
• exchange.xforce.ibmcloud.com/vulnerabilities/41361

perforce server のその他の脆弱性

• CVE-2010-0935中 4.6Perforce Server 2009.2 and earlier, when the protection table is empty, allows remote authenticated users to obtain super privileges via a "…
• CVE-2010-0934高 7.1The triggers functionality in Perforce Server 2008.1 allows remote authenticated users with super privileges to execute arbitrary operating-…
• CVE-2010-0933中 6.8Directory traversal vulnerability in Perforce Server 2008.1 allows remote authenticated users to create arbitrary files via a .. (dot dot) i…
• CVE-2010-0932中 5.0The FTP server in Perforce Server 2008.1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) vi…
• CVE-2010-0931中 5.0The Perforce service (p4s.exe) in Perforce Server 2008.1 allows remote attackers to cause a denial of service (daemon crash) via crafted dat…