CVE-2010-0934

The triggers functionality in Perforce Server 2008.1 allows remote authenticated users with super privileges to execute arbitrary operating-system commands by using a "p4 client" command in conjunction with the form-in trigger script.

Score

CVSS 2.0 7.1 High

Status

Modified - cve@mitre.org

Published

2010-03-05

Last modified

2024-09-16

Weaknesses

CWE-78

Affected products

• Perforce Server (Perforce)

References

• http://lists.immunitysec.com/pipermail/dailydave/2010-March/006063.html
• http://www.securityfocus.com/bid/36261