Description
P4Webs.exe in Perforce P4Web 2006.2 and earlier, when running on Windows, allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with an empty body and a Content-Length greater than 0.
References
- 3476 third-party-advisory
- 28158 third-party-advisory
- 39297 vdb-entry
- http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-015.txt
- 26806 vdb-entry
- p4web-contentlength-dos(39142) vdb-entry
- 20071218 SYMSA-2007-015 mailing-list