CVE-2008-4297 Missing authorization in n/a
Remote attackers can bypass pull permissions in Mercurial hgweb to read arbitrary repository files without authentication.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2008-4297?
CVE-2008-4297 is a medium-severity missing authorization vulnerability in n/a, published on 27 Sep 2008. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Mercurial before 1.0.2 does not enforce the allowpull permission setting for a pull operation from hgweb, which allows remote attackers to read arbitrary files from a repository via an "hg pull" request.
Weakness: CWE-264
Which versions are affected by CVE-2008-4297?
It affects 1 product.
Products include Mercurial Mercurial.
How do I fix CVE-2008-4297?
Upgrade to a fixed version.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2008-4297 being exploited?
There is no known exploitation of CVE-2008-4297 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2018-13347 Mercurial mishandles integer addition and subtraction
- CVE-2018-17983 Mercurial Out-of-bounds Read vulnerability
- CVE-2018-13346 Mercurial Improper Input Validation vulnerability
- CVE-2018-13348 Mercurial Improper Input Validation vulnerability
- CVE-2014-9462 Mercurial vulnerable to arbitrary command execution via a crafted repository name in a clone command
Sources
Also known as DEBIAN-CVE-2008-4297, GHSA-rw83-rp96-92cm.