CVE-2007-6349

Published: Dec 20, 2007Modified: Apr 23, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

P4Webs.exe in Perforce P4Web 2006.2 and earlier, when running on Windows, allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with an empty body and a Content-Length greater than 0.

Affected (2)

Products: Perforce: P4web

Perforce

1 product

P4web

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Perforce P4web	Version 2006.1
Perforce P4web	Version 2006.2

Related CWEs

CWE-399

References (14)

http://secunia.com/advisories/28158

Source: cve@mitre.org

http://securityreason.com/securityalert/3476

Source: cve@mitre.org

http://www.osvdb.org/39297

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/485321/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/26806

Source: cve@mitre.org

Patch

http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-015.txt

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/39142

Source: cve@mitre.org

http://secunia.com/advisories/28158