Secunia

A vulnerability has been reported in Perforce Web Client (P4Web), which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error in the P4Web daemon (P4Webs.exe) when processing HTTP requests with a "Content-Length" header greater than 0 with no body. This can be exploited to cause the process to consume large amounts of CPU resources via a specially crafted HTTP request.

The vulnerability affects versions 2006.2 and prior.

Solution
Update to version 2007.2 or later.
Further details available in Customer Area

Provided and/or discovered by
* Oliver Karow, Symantec Vulnerability Research
* Reportedly discovered by the vendor's QA department last February 2007.

Original Advisory
SYMSA-2007-015:
http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-015.txt

Deep Links
Links available in Customer Area