Secunia

Luigi Auriemma has discovered some vulnerabilities in Perforce Server, which can be exploited by malicious people to cause a DoS (Denial of Service).

1) NULL-pointer dereference errors in the Perforce service (p4s.exe) when handling certain commands (e.g. dm-FaultFile and dm-LazyCheck) can be exploited to cause the service to crash via specially crafted packets sent to default port 1666/TCP.

2) Errors in the Perforce service when handling certain commands (e.g. server-DiffFile) can be exploited to cause the service to crash or consume large amounts of memory via specially crafted packets sent to default port 1666/TCP.

The vulnerabilities are confirmed in version 2007.3/143793 on Windows. Other versions may also be affected.

Solution
Restrict network access to the service.

Provided and/or discovered by
Luigi Auriemma

Changelog
Further details available in Customer Area

Original Advisory
http://aluigi.altervista.org/adv/perforces-adv.txt

Deep Links
Links available in Customer Area