CVE-2010-0935

Perforce Server 2009.2 and earlier, when the protection table is empty, allows remote authenticated users to obtain super privileges via a "p4 protect" command.

Published: Mar 5, 2010
Updated: Apr 13, 2023
CVE: CVE-2010-0935
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.6
AV:N/AC:H/Au:S/C:P/I:P/A:P

CWEs:

CWE-264

Affected Software
References

Software	From	Fixed in
perforce / perforce_server	2008.1	2008.1.x
perforce / perforce_server	2007.3	2007.3.x
perforce / perforce_server	2002.2	2002.2.x
perforce / perforce_server	2000.2	2000.2.x
perforce / perforce_server	-	2009.2.x
perforce / perforce_server	2006.1	2006.1.x
perforce / perforce_server	2001.2	2001.2.x
perforce / perforce_server	99.2	99.2.x
perforce / perforce_server	2007.2	2007.2.x
perforce / perforce_server	2004.2	2004.2.x
perforce / perforce_server	2005.1	2005.1.x
perforce / perforce_server	2005.2	2005.2.x
perforce / perforce_server	2000.1	2000.1.x
perforce / perforce_server	2001.1	2001.1.x
perforce / perforce_server	2002.1	2002.1.x
perforce / perforce_server	99.1	99.1.x
perforce / perforce_server	2007.3_143793	2007.3_143793.x
perforce / perforce_server	2003.1	2003.1.x
perforce / perforce_server	97.3	97.3.x
perforce / perforce_server	2006.2	2006.2.x
perforce / perforce_server	98.2	98.2.x
perforce / perforce_server	2003.2	2003.2.x
perforce / perforce_server	2008.2	2008.2.x

Vulnerability Database

CVE-2010-0935

Deep Security Visibility Without the Complexity