Perforce Socket Hijacking Vulnerability
BID:38594
Info
Perforce Socket Hijacking Vulnerability
| Bugtraq ID: | 38594 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Mar 03 2010 12:00AM |
| Updated: | Mar 03 2010 12:00AM |
| Credit: | McAfee |
| Vulnerable: |
Perforce Perforce Server 2009.2 Perforce Perforce Server 2008.1/160022 Perforce Perforce Server 2007.3 |
| Not Vulnerable: | |
Discussion
Perforce Socket Hijacking Vulnerability
Perforce is prone to a vulnerability that allows attackers to hijack sockets.
NOTE: For an exploit to succeed, the underlying operating system must allow rebinding of a port.
Perforce is prone to a vulnerability that allows attackers to hijack sockets.
NOTE: For an exploit to succeed, the underlying operating system must allow rebinding of a port.
Exploit / POC
Perforce Socket Hijacking Vulnerability
Attackers can use readily available tools to exploit this issue.
Attackers can use readily available tools to exploit this issue.
Solution / Fix
Perforce Socket Hijacking Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Perforce Socket Hijacking Vulnerability
References:
References:
- Perforce Server Homepage (Perforce Software)
- Protecting Your Critical Assets Lessons Learned from �??Operation Aurora�?� (McAfee)