CVE-2008-2942 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	6.8 UNKNOWN	NETWORK	MEDIUM		AV:N/AC:M/Au:N/C:P/I:P/A:P

Base Score

CVSS 3.x

EPSS Score

Percentile: 68%

Affected Products (NVD)

Vendor	Product	Version
mercurial	mercurial	1.0.1

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

mercurial

bookworm	6.3.2-1 fixed
bullseye	5.6.1-4 fixed
etch	not-affected
sid	6.8.2-1 fixed
trixie	6.8.2-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

mercurial

dapper	ignored
feisty	ignored
gutsy	ignored
hardy	ignored
intrepid	not-affected
jaunty	not-affected
karmic	not-affected
lucid	not-affected
maverick	not-affected
natty	not-affected
oneiric	not-affected

Known Exploits!

Common Weakness Enumeration

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.html

http://secunia.com/advisories/31108

http://secunia.com/advisories/31110

http://secunia.com/advisories/31167

http://security.gentoo.org/glsa/glsa-200807-09.xml

http://wiki.rpath.com/Advisories:rPSA-2008-0211

http://www.openwall.com/lists/oss-security/2008/06/30/1

http://www.openwall.com/lists/oss-security/2008/07/01/1

http://www.securityfocus.com/archive/1/493881/100/0/threaded

http://www.securityfocus.com/bid/30072

http://www.selenic.com/hg/rev/87c704ac92d4

https://exchange.xforce.ibmcloud.com/vulnerabilities/43551

https://issues.rpath.com/browse/RPL-2633

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.html

http://secunia.com/advisories/31108

http://secunia.com/advisories/31110

http://secunia.com/advisories/31167

http://security.gentoo.org/glsa/glsa-200807-09.xml

http://wiki.rpath.com/Advisories:rPSA-2008-0211

http://www.openwall.com/lists/oss-security/2008/06/30/1

http://www.openwall.com/lists/oss-security/2008/07/01/1

http://www.securityfocus.com/archive/1/493881/100/0/threaded

http://www.securityfocus.com/bid/30072

http://www.selenic.com/hg/rev/87c704ac92d4

https://exchange.xforce.ibmcloud.com/vulnerabilities/43551

https://issues.rpath.com/browse/RPL-2633