Monotone 0.25 and earlier, when a user creates a file in a directory called "mt", and when checking out that file on a case-insensitive file system such as Windows or Mac OS X, places the file into the "MT" bookkeeping directory, which could allow context-dependent attackers to execute arbitrary Lua programs as the user running monotone.
CVSS 2.0
Severity: LOW
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| monotone | monotone | 0.25 |
monotone before 0.48.1, when configured to allow remote commands, allows remote attackers to cause a denial of service (crash) via an empty argument to the mtn command.
CVSS 2.0
Severity: MEDIUM
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| monotone | monotone | 0.35 |
| monotone | monotone | 0.23 |
| monotone | monotone | 0.24 |
| monotone | monotone | 0.27 |
| monotone | monotone | 0.1 |
| monotone | monotone | 0.41 |
| monotone | monotone | 0.46 |
| monotone | monotone | 0.40 |
| monotone | monotone | 0.15 |
| monotone | monotone | 0.31 |
| monotone | monotone | 0.6 |
| monotone | monotone | 0.11 |
| monotone | monotone | - |
| monotone | monotone | 0.19 |
| monotone | monotone | 0.44 |
| monotone | monotone | 0.33 |
| monotone | monotone | 0.13 |
| monotone | monotone | 0.14 |
| monotone | monotone | 0.29 |
| monotone | monotone | 0.45 |
| monotone | monotone | 0.5 |
| monotone | monotone | 0.47 |
| monotone | monotone | 0.8 |
| monotone | monotone | 0.3 |
| monotone | monotone | 0.4 |
| monotone | monotone | 0.37 |
| monotone | monotone | 0.16 |
| monotone | monotone | 0.18 |
| monotone | monotone | 0.20 |
| monotone | monotone | 0.2 |
| monotone | monotone | 0.28 |
| monotone | monotone | 0.34 |
| monotone | monotone | 0.22 |
| monotone | monotone | 0.30 |
| monotone | monotone | 0.9 |
| monotone | monotone | 0.12 |
| monotone | monotone | 0.21 |
| monotone | monotone | 0.26 |
| monotone | monotone | * |
| monotone | monotone | 0.38 |
| monotone | monotone | 0.36 |
| monotone | monotone | 0.10 |
| monotone | monotone | 0.39 |
| monotone | monotone | 0.42 |
| monotone | monotone | 0.32 |
| monotone | monotone | 0.25 |
| monotone | monotone | 0.43 |
| monotone | monotone | 0.17 |
| monotone | monotone | 0.7 |