CVE-2008-2942: Path Traversal

Q: What is the severity of CVE-2008-2942?

CVE-2008-2942 has a medium severity level due to the potential for unauthorized file modifications.

Q: How do I fix CVE-2008-2942?

To fix CVE-2008-2942, upgrade Mercurial to version 1.0.2 or later.

Q: What causes the vulnerability CVE-2008-2942?

CVE-2008-2942 is caused by a directory traversal vulnerability in the patch.py file of Mercurial prior to version 1.0.2.

Q: What versions of Mercurial are affected by CVE-2008-2942?

CVE-2008-2942 affects Mercurial version 1.0.1 and earlier.

Q: Can exploiting CVE-2008-2942 lead to further attacks?

Yes, exploiting CVE-2008-2942 could potentially allow attackers to compromise other files on the system.

Published Jun 30, 2008

Updated

Directory traversal vulnerability in patch.py in Mercurial 1.0.1 allows user-assisted attackers to modify arbitrary files via ".." (dot dot) sequences in a patch file.

Other sources

Directory traversal vulnerability in patch.py in Mercurial before 1.0.2 allows user-assisted attackers to modify arbitrary files via ".." (dot dot) sequences in a patch file.

Affected Software

2 affected componentsFixes available

pip/mercurial<1.0.2

1.0.2

Mercurial Mercurial=1.0.1

Event History

Jun 30, 2008

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

May 1, 2022

Advisory Published

11:55 PM

Frequently Asked Questions

What is the severity of CVE-2008-2942?

CVE-2008-2942 has a medium severity level due to the potential for unauthorized file modifications.

How do I fix CVE-2008-2942?