NVD

Id
86696  
Name
CVE-2017-9462  
Description
In Mercurial before 4.1.3, hg serve --stdio allows remote authenticated users to launch the Python debugger, and consequently execute arbitrary code, by using --debugger as a repository name.  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-06-23  
Published
2017-06-06  
Modified Date
2017-06-20  
Seq
2017-9462  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
420668 86696 CVE-2016-7521 [oss-security] 20160922 Re: CVE Requests: Various ImageMagick issues (as reported in the Debian BTS)  View
420669 86696 CVE-2016-7521 93131  View
420670 86696 CVE-2016-7521 https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1537418  View
420671 86696 CVE-2016-7521 https://bugzilla.redhat.com/show_bug.cgi?id=1378748  View
420672 86696 CVE-2016-7521 https://github.com/ImageMagick/ImageMagick/commit/30eec879c8b446b0ea9a3bb0da1a441cc8482bc4  View
420673 86696 CVE-2016-7521 https://github.com/ImageMagick/ImageMagick/issues/92  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
68187 JVNDB-2017-004444 Mercurial の "hg serve --stdio" における Python デバッガを起動される脆弱性 Mercurial の "hg serve --stdio" には、Python デバッガを起動され、その結果、任意のコードを実行される脆弱性が存在します。 CVE-2017-9462 0 CVE-2017-9462 86696 9 8.8 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-004444.html 2017-04-18 2017-06-26 View