Mercurial Directory traversal vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2008-2942 · ADVISORY
• exchange.xforce.ibmcloud.com/vulnerabilities/43551 · WEB
• dscho/hg · PACKAGE
• issues.rpath.com/browse/RPL-2633 · WEB
• lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.html · WEB
• secunia.com/advisories/31108 · WEB
• secunia.com/advisories/31110 · WEB
• secunia.com/advisories/31167 · WEB
• security.gentoo.org/glsa/glsa-200807-09.xml · WEB
• wiki.rpath.com/Advisories:rPSA-2008-0211 · WEB
• openwall.com/lists/oss-security/2008/06/30/1 · WEB
• openwall.com/lists/oss-security/2008/07/01/1 · WEB
• securityfocus.com/archive/1/493881/100/0/threaded

mercurial のその他の脆弱性

• CVE-2014-9390緊急 9.8Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before…
• CVE-2010-4237中 5.9Mercurial before 1.6.4 fails to verify the Common Name field of SSL certificates which allows remote attackers who acquire a certificate sig…
• CVE-2019-3902中 5.9A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and …
• CVE-2018-17983緊急 9.1cext/manifest.c in Mercurial before 4.7.2 has an out-of-bounds read during parsing of a malformed manifest entry.
• CVE-2018-13348高 7.5The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remai…