Perforce revision control system DoS
Published:		19.12.2007
Source:		BUGTRAQ
SecurityVulns ID:		8474
Type:		remote
Level:		5/10
Description:		HTTP request with empty boy and non-zero Content-Length causes CPU exhaustion.

Affected:		PERFORCE : Perforce 2006.1
CVE:		CVE-2007-6349 (P4Webs.exe in Perforce P4Web 2006.2 and earlier, when running on Windows, allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with an empty body and a Content-Length greater than 0.)

Original document

SYMANTEC, SYMSA-2007-015 (19.12.2007)

Discuss:

Read or add your comments to this news (0 comments)