What’s Vulnerable › Vulnerabilities

CVE-2010-0935

• Severity: medium (CVSS 4.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2010-03-05 · updated 2026-06-16
• Weakness: CWE-264

Description

Perforce Server 2009.2 and earlier, when the protection table is empty, allows remote authenticated users to obtain super privileges via a "p4 protect" command.

Affected products

• Perforce Server: through 2009.2; 97.3, 98.2, 99.1, 99.2, 2000.1, 2000.2 (+16)

References

• http://lists.immunitysec.com/pipermail/dailydave/2010-March/006063.html
• http://www.perforce.com/perforce/doc.current/manuals/cmdref/protect.html
• http://www.securityfocus.com/bid/36261
• http://lists.immunitysec.com/pipermail/dailydave/2010-March/006063.html
• http://www.perforce.com/perforce/doc.current/manuals/cmdref/protect.html
• http://www.securityfocus.com/bid/36261

Get alerted when CVE-2010-0935 or the next vulnerability affects your stack