Security Advisory

CVE-2008-2942

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2008-06-30 20:00:00
Last updated 2024-08-07 09:21:34
Assigner mitre
State PUBLISHED

Description

Directory traversal vulnerability in patch.py in Mercurial 1.0.1 allows user-assisted attackers to modify arbitrary files via ".." (dot dot) sequences in a patch file.