Perforce Server Multiple Remote Denial of Service Vulnerabilities

Bugtraq ID:	28108
Class:	Unknown
CVE:	CVE-2008-1303 CVE-2008-1338 CVE-2008-1302
Remote:	Yes
Local:	No
Published:	Mar 05 2008 12:00AM
Updated:	Jul 05 2016 10:00PM
Credit:	Luigi Auriemma is credited with the discovery of these vulnerabilities.
Vulnerable:	Perforce Software Perforce Server 2007.3
Not Vulnerable:

Perforce Server Multiple Remote Denial of Service Vulnerabilities

Perforce Server is prone to multiple remote denial-of-service vulnerabilities.

An attacker can exploit these issues to crash the affected application or cause excessive memory to be consumed, denying service to legitimate users.

These issues affect Perforce Server 2007.3; other versions may also be affected.

Perforce Server Multiple Remote Denial of Service Vulnerabilities

The following exploit code is available:

• /data/vulnerabilities/exploits/perforces.zip

Perforce Server Multiple Remote Denial of Service Vulnerabilities

Solution:
Currently we are not aware of any working exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Perforce Server Multiple Remote Denial of Service Vulnerabilities

References:

• Perforce Server Homepage (Perforce Software)
  
• Multiple vulnerabilities in Perforce Server 2007.3/143793 (Luigi Auriemma )