Launchpad.net

CVE 2014-9462

The _validaterepo function in sshpeer in Mercurial before 3.2.4 allows remote attackers to execute arbitrary commands via a crafted repository name in a clone command.

Related bugs and status

CVE-2014-9462 (Candidate) is related to these bugs:

Bug #1404035: Errors in handling case-sensitive directories allow for remote code execution on pull

		In	Importance	Status
1404035	Errors in handling case-sensitive directories allow for remote code execution on pull	git (Ubuntu)	Medium	Fix Released
1404035	Errors in handling case-sensitive directories allow for remote code execution on pull	mercurial (Ubuntu)	Medium	Fix Released
1404035	Errors in handling case-sensitive directories allow for remote code execution on pull	git (Ubuntu Trusty)	Medium	Fix Released
1404035	Errors in handling case-sensitive directories allow for remote code execution on pull	mercurial (Ubuntu Trusty)	Medium	Fix Released
1404035	Errors in handling case-sensitive directories allow for remote code execution on pull	git (Ubuntu Precise)	Medium	Fix Released
1404035	Errors in handling case-sensitive directories allow for remote code execution on pull	mercurial (Ubuntu Precise)	Medium	Fix Released
1404035	Errors in handling case-sensitive directories allow for remote code execution on pull	git (Ubuntu Vivid)	Medium	Fix Released
1404035	Errors in handling case-sensitive directories allow for remote code execution on pull	mercurial (Ubuntu Vivid)	Medium	Fix Released
1404035	Errors in handling case-sensitive directories allow for remote code execution on pull	git (Ubuntu Utopic)	Medium	Fix Released
1404035	Errors in handling case-sensitive directories allow for remote code execution on pull	mercurial (Ubuntu Utopic)	Medium	Fix Released
1404035	Errors in handling case-sensitive directories allow for remote code execution on pull	libgit2 (Ubuntu)	Undecided	Fix Released
1404035	Errors in handling case-sensitive directories allow for remote code execution on pull	libgit2 (Ubuntu Trusty)	Undecided	Confirmed
1404035	Errors in handling case-sensitive directories allow for remote code execution on pull	libgit2 (Ubuntu Utopic)	Undecided	Invalid
1404035	Errors in handling case-sensitive directories allow for remote code execution on pull	libgit2 (Ubuntu Vivid)	Undecided	Invalid
1404035	Errors in handling case-sensitive directories allow for remote code execution on pull	jgit (Ubuntu)	Undecided	Fix Released
1404035	Errors in handling case-sensitive directories allow for remote code execution on pull	jgit (Ubuntu Trusty)	Undecided	Confirmed
1404035	Errors in handling case-sensitive directories allow for remote code execution on pull	jgit (Ubuntu Utopic)	Undecided	Invalid
1404035	Errors in handling case-sensitive directories allow for remote code execution on pull	jgit (Ubuntu Vivid)	Undecided	Invalid

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2014-9462

Related bugs and status

Related bugs

References