CVE-2008-1303

The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon crash) via a missing parameter to the (1) dm-FaultFile, (2) dm-LazyCheck, (3) dm-ResolvedFile, (4) dm-OpenFile, (5) crypto, and possibly unspecified other commands, which triggers a NULL pointer dereference.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:perforce:perforce_server:*:*:*:*:*:*:*:*
cpe:2.3:a:perforce:perforce_server:2000.1:*:*:*:*:*:*:*
cpe:2.3:a:perforce:perforce_server:2000.2:*:*:*:*:*:*:*
cpe:2.3:a:perforce:perforce_server:2001.1:*:*:*:*:*:*:*
cpe:2.3:a:perforce:perforce_server:2001.2:*:*:*:*:*:*:*
cpe:2.3:a:perforce:perforce_server:2002.1:*:*:*:*:*:*:*
cpe:2.3:a:perforce:perforce_server:2002.2:*:*:*:*:*:*:*
cpe:2.3:a:perforce:perforce_server:2003.1:*:*:*:*:*:*:*
cpe:2.3:a:perforce:perforce_server:2003.2:*:*:*:*:*:*:*
cpe:2.3:a:perforce:perforce_server:2004.2:*:*:*:*:*:*:*
cpe:2.3:a:perforce:perforce_server:2005.1:*:*:*:*:*:*:*
cpe:2.3:a:perforce:perforce_server:2005.2:*:*:*:*:*:*:*
cpe:2.3:a:perforce:perforce_server:2006.1:*:*:*:*:*:*:*
cpe:2.3:a:perforce:perforce_server:2006.2:*:*:*:*:*:*:*
cpe:2.3:a:perforce:perforce_server:2007.2:*:*:*:*:*:*:*
cpe:2.3:a:perforce:perforce_server:2007.3:*:*:*:*:*:*:*

History

No history.

Information

Published : 2008-03-12 17:44

Updated : 2024-02-04 17:13


NVD link : CVE-2008-1303

Mitre link : CVE-2008-1303

CVE.ORG link : CVE-2008-1303


JSON object : View

Products Affected

perforce

  • perforce_server
CWE
CWE-20

Improper Input Validation