Every CVE Search/ Get API key

CVE-2010-0933

Directory traversal vulnerability in Perforce Server 2008.1 allows remote authenticated users to...

6.8 Medium

Directory traversal vulnerability in Perforce Server 2008.1 allows remote authenticated users to create arbitrary files via a .. (dot dot) in the argument to the "p4 add" command.

Exploit likelihood

1.79%Up 0.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.8

Directory traversal vulnerability in Perforce Server 2008.1 allows remote authenticated users to create arbitrary files via a .. (dot dot) in the argument to the "p4 add" command.

Record
CVE-2010-0933
CVSS 2.0
6.8 MediumAV:N/AC:L/Au:S/C:N/I:C/A:N
Weakness
CWE-22
Updated
2026-11-02
CVE List No score

Directory traversal vulnerability in Perforce Server 2008.1 allows remote authenticated users to create arbitrary files via a .. (dot dot) in the argument to the "p4 add" command.

Record
CVE-2010-0933
Updated
2026-11-02
EUVDEUVD-2010-0958 No score

Directory traversal vulnerability in Perforce Server 2008.1 allows remote authenticated users to create arbitrary files via a .. (dot dot) in the argument to the "p4 add" command.

Record
EUVD-2010-0958
Updated
2026-11-03
GitHub AdvisoriesGHSA-qg57-q9c9-rw9r No score

Directory traversal vulnerability in Perforce Server 2008.1 allows remote authenticated users to...

Directory traversal vulnerability in Perforce Server 2008.1 allows remote authenticated users to create arbitrary files via a .. (dot dot) in the argument to the "p4 add" command.

Record
GHSA-qg57-q9c9-rw9r
Weakness
CWE-22
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-0933 is a medium vulnerability (CVSS 6.8) in Perforce Server, published March 5, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.79%, the 78th percentile. No source names a fixed version.

References

MoveEnter Open