CVE-2008-1303

Published: Mar 12, 2008Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon crash) via a missing parameter to the (1) dm-FaultFile, (2) dm-LazyCheck, (3) dm-ResolvedFile, (4) dm-OpenFile, (5) crypto, and possibly unspecified other commands, which triggers a NULL pointer dereference.

Affected (16)

Products: Perforce: Perforce Server

Perforce

1 product

Perforce Server

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Perforce Perforce Server	Up to 2007.3_143793
Perforce Perforce Server	Version 2000.1
Perforce Perforce Server	Version 2000.2
Perforce Perforce Server	Version 2001.1
Perforce Perforce Server	Version 2001.2
Perforce Perforce Server	Version 2002.1
Perforce Perforce Server	Version 2002.2
Perforce Perforce Server	Version 2003.1
Perforce Perforce Server	Version 2003.2
Perforce Perforce Server	Version 2004.2
Perforce Perforce Server	Version 2005.1
Perforce Perforce Server	Version 2005.2
Perforce Perforce Server	Version 2006.1
Perforce Perforce Server	Version 2006.2
Perforce Perforce Server	Version 2007.2
Perforce Perforce Server	Version 2007.3