CVE-2010-0934

Severity: high (CVSS 7.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-03-05 · updated 2026-06-16
Weakness: CWE-78

Description

The triggers functionality in Perforce Server 2008.1 allows remote authenticated users with super privileges to execute arbitrary operating-system commands by using a "p4 client" command in conjunction with the form-in trigger script.

Affected products

Perforce Server: 2008.1

References

http://lists.immunitysec.com/pipermail/dailydave/2010-March/006063.html
http://www.securityfocus.com/bid/36261
http://lists.immunitysec.com/pipermail/dailydave/2010-March/006063.html
http://www.securityfocus.com/bid/36261

Get alerted when CVE-2010-0934 or the next vulnerability affects your stack