Back to CVE Browser

CVE-2010-0933

MEDIUM

6.8

CVSS Severity Score

EPSS Score0.0090%

EPSS Percentile19.53th

PublishedMar 5, 2010

Last ModifiedApr 29, 2026

Vulnerability Description

Directory traversal vulnerability in Perforce Server 2008.1 allows remote authenticated users to create arbitrary files via a .. (dot dot) in the argument to the "p4 add" command.

Affected Platforms (CPE)

📦

Perforce

Perforce Server

= 2008.1

References & Advisories

🔗 http://lists.immunitysec.com/pipermail/dailydave/2010-March/006063.html

🔗 http://www.securityfocus.com/bid/36261

🔗 http://lists.immunitysec.com/pipermail/dailydave/2010-March/006063.html

🔗 http://www.securityfocus.com/bid/36261

Related Vulnerabilities

CVE-2007-010010.0

The Perforce client does not restrict the set of files that it overwrites upon receiving a request from the server, which allows r...

CVE-2008-13387.8

The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (...

CVE-2021-216557.1

A cross-site request forgery (CSRF) vulnerability in Jenkins P4 Plugin 1.11.4 and earlier allows attackers to connect to an attack...

CVE-2010-09347.1

The triggers functionality in Perforce Server 2008.1 allows remote authenticated users with super privileges to execute arbitrary ...