VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 5, 2010· Updated Apr 29, 2026

CVE-2010-0935

CVE-2010-0935

Description

Perforce Server 2009.2 and earlier, when the protection table is empty, allows remote authenticated users to obtain super privileges via a "p4 protect" command.

Affected products

23
  • Perforce/Perforce Server23 versions
    cpe:2.3:a:perforce:perforce_server:*:*:*:*:*:*:*:*+ 22 more
    • cpe:2.3:a:perforce:perforce_server:*:*:*:*:*:*:*:*range: <=2009.2
    • cpe:2.3:a:perforce:perforce_server:2000.1:*:*:*:*:*:*:*
    • cpe:2.3:a:perforce:perforce_server:2000.2:*:*:*:*:*:*:*
    • cpe:2.3:a:perforce:perforce_server:2001.1:*:*:*:*:*:*:*
    • cpe:2.3:a:perforce:perforce_server:2001.2:*:*:*:*:*:*:*
    • cpe:2.3:a:perforce:perforce_server:2002.1:*:*:*:*:*:*:*
    • cpe:2.3:a:perforce:perforce_server:2002.2:*:*:*:*:*:*:*
    • cpe:2.3:a:perforce:perforce_server:2003.1:*:*:*:*:*:*:*
    • cpe:2.3:a:perforce:perforce_server:2003.2:*:*:*:*:*:*:*
    • cpe:2.3:a:perforce:perforce_server:2004.2:*:*:*:*:*:*:*
    • cpe:2.3:a:perforce:perforce_server:2005.1:*:*:*:*:*:*:*
    • cpe:2.3:a:perforce:perforce_server:2005.2:*:*:*:*:*:*:*
    • cpe:2.3:a:perforce:perforce_server:2006.1:*:*:*:*:*:*:*
    • cpe:2.3:a:perforce:perforce_server:2006.2:*:*:*:*:*:*:*
    • cpe:2.3:a:perforce:perforce_server:2007.2:*:*:*:*:*:*:*
    • cpe:2.3:a:perforce:perforce_server:2007.3:*:*:*:*:*:*:*
    • cpe:2.3:a:perforce:perforce_server:2007.3_143793:*:*:*:*:*:*:*
    • cpe:2.3:a:perforce:perforce_server:2008.1:*:*:*:*:*:*:*
    • cpe:2.3:a:perforce:perforce_server:2008.2:*:*:*:*:*:*:*
    • cpe:2.3:a:perforce:perforce_server:97.3:*:*:*:*:*:*:*
    • cpe:2.3:a:perforce:perforce_server:98.2:*:*:*:*:*:*:*
    • cpe:2.3:a:perforce:perforce_server:99.1:*:*:*:*:*:*:*
    • cpe:2.3:a:perforce:perforce_server:99.2:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.