Perforce Server Journal and Log File Information Disclosure Vulnerability

Bugtraq ID:	38590
Class:	Configuration Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 08 2010 12:00AM
Updated:	Mar 08 2010 12:00AM
Credit:	McAfee
Vulnerable:	Perforce Perforce Server 2009.2
Not Vulnerable:

Perforce Server Journal and Log File Information Disclosure Vulnerability

Perforce Server is prone to an information-disclosure vulnerability.

An attacker can exploit this issue gain access to sensitive information that may lead to further attacks.

Perforce Server 2009.2 is vulnerable; other versions may also be affected.

Perforce Server Journal and Log File Information Disclosure Vulnerability

Attackers can use standard tools to exploit this issue.

Perforce Server Journal and Log File Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Perforce Server Journal and Log File Information Disclosure Vulnerability

References:

• Perforce Server Homepage (Perforce Software)
  
• Protecting Your Critical Assets Lessons Learned from 'Operation Aurora' (McAfee)