Security Advisory
CVE-2008-2942
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Directory traversal vulnerability in patch.py in Mercurial 1.0.1 allows user-assisted attackers to modify arbitrary files via ".." (dot dot) sequences in a patch file.