CVE-2010-0935

Perforce Server 2009.2 and earlier, when the protection table is empty, allows remote authenticated users to obtain super privileges via a "p4 protect" command.

Score

CVSS 2.0 4.6 Medium

Status

Modified - cve@mitre.org

Published

2010-03-05

Last modified

2024-09-16

Weaknesses

CWE-264

Affected products

• Perforce Server (Perforce)

References

• http://lists.immunitysec.com/pipermail/dailydave/2010-March/006063.html
• http://www.perforce.com/perforce/doc.current/manuals/cmdref/protect.html
• http://www.securityfocus.com/bid/36261