CVE Feed

    Dashboard / CVE / CVE-2008-4297

    CVE-2008-4297

    Mercurial before 1.0.2 does not enforce the allowpull permission setting for a pull operation from hgweb, which allows remote attackers to read arbitrary files from a repository via an "hg pull" request.

    Published:Aug 13, 2008
    Last Modified:Apr 23, 2026
    EPS:Sep 27, 2008
    EPSS Score:0.00756
    CVSS Score:5

    Affected Products

    Vendor
    Mercurial
    Product
    Mercurial

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2019-3902 (CVSS 5.1) — A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subrepositories to defeat Mercur…
    CVE-2018-17983 (CVSS 9.1) — cext/manifest.c in Mercurial before 4.7.2 has an out-of-bounds read during parsing of a malformed manifest ent…
    CVE-2018-13348 (CVSS 7.5) — The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there sho…
    CVE-2018-13347 (CVSS 9.8) — mpatch.c in Mercurial before 4.6.1 mishandles integer addition and subtraction, aka OVE-20180430-0002.…
    CVE-2018-13346 (CVSS 7.5) — The mpatch_apply function in mpatch.c in Mercurial before 4.6.1 incorrectly proceeds in cases where the fragme…
    CVE-2018-1000132 (CVSS 9.1) — Mercurial version 4.5 and earlier contains a Incorrect Access Control (CWE-285) vulnerability in Protocol serv…
    CVE-2017-17458 (CVSS 9.8) — In Mercurial before 4.4.1, it is possible that a specially malformed repository can cause Git subrepositories …
    CVE-2017-1000115 (CVSS 7.5) — Mercurial prior to version 4.3 is vulnerable to a missing symlink check that can malicious repositories to mod…
    CVE-2017-1000116 (CVSS 9.8) — Mercurial prior to 4.3 did not adequately sanitize hostnames passed to ssh, leading to possible shell-injectio…
    CVE-2017-9462 (CVSS 8.8) — In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger,…

    References

    http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00004.html
    http://marc.info/?l=oss-security&m=122169840003798&w=2
    http://secunia.com/advisories/32182
    http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0276
    http://www.securityfocus.com/archive/1/496488/100/0/threaded
    http://www.securityfocus.com/bid/31223
    http://www.selenic.com/mercurial/wiki/index.cgi/WhatsNew#head-905b8adb3420a77d92617e06590055bd8952e02b
    http://www.vupen.com/english/advisories/2008/2604
    https://exchange.xforce.ibmcloud.com/vulnerabilities/45229
    https://issues.rpath.com/browse/RPL-2753
    http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00004.html
    http://marc.info/?l=oss-security&m=122169840003798&w=2
    http://secunia.com/advisories/32182
    http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0276
    http://www.securityfocus.com/archive/1/496488/100/0/threaded
    http://www.securityfocus.com/bid/31223
    http://www.selenic.com/mercurial/wiki/index.cgi/WhatsNew#head-905b8adb3420a77d92617e06590055bd8952e02b
    http://www.vupen.com/english/advisories/2008/2604
    https://exchange.xforce.ibmcloud.com/vulnerabilities/45229
    https://issues.rpath.com/browse/RPL-2753

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High