CVE-2010-4098

monotone before 0.48.1, when configured to allow remote commands, allows remote attackers to cause a denial of service crash via an empty argument to the mtn command...

Command injection

monotone before 0.48.1, when configured to allow remote commands, allows remote attackers to cause a denial of service crash via an empty argument to the mtn command...

CVE-2010-4098

monotone before 0.48.1, when configured to allow remote commands, allows remote attackers to cause a denial of service crash via an empty argument to the mtn command...

CVE-2010-4098

Removed by vendor...

CVE-2010-4098

monotone before 0.48.1, when configured to allow remote commands, allows remote attackers to cause a denial of service crash via an empty argument to the mtn command...

CVE-2010-4098

Summary: CVE-2010-4098 affects monotone prior to 0.48.1. When configured to allow remote commands, an empty argument to the mtn command could cause a remote denial of service (server crash). Root cause: improper handling of an empty argument in remote-command mode. Impact: remote crash of the mon...

FreeBSD : monotone -- remote denial of service in default setup (c9a6ae4a-df8b-11df-9573-00262d5ed8ee)

The monotone developers report : Running 'mtn ''' or 'mtn ls ''' doesn't cause an internal error anymore. In monotone 0.48 and earlier this behavior could be used to crash a server remotely but only if it was configured to allow execution of remote commands. %NASLMINLEVEL 70300 C Tenable Network...

monotone -- remote denial of service in default setup

The monotone developers report: Running "mtn ''" or "mtn ls ''" doesn't cause an internal error anymore. In monotone 0.48 and earlier this behavior could be used to crash a server remotely but only if it was configured to allow execution of remote commands...

Monotone code execution versioning controle system code execution

Problems with case insensitive filesystems...

[SA19260] monotone "MT" Bookkeeping Directory Arbitrary Lua Code Execution

TITLE: monotone "MT" Bookkeeping Directory Arbitrary Lua Code Execution SECUNIA ADVISORY ID: SA19260 VERIFY ADVISORY: http://secunia.com/advisories/19260/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: monotone 0.x http://secunia.com/product/8767/ DESCRIPTION: A...

CVE-2006-1166

Monotone 0.25 and earlier, when a user creates a file in a directory called "mt", and when checking out that file on a case-insensitive file system such as Windows or Mac OS X, places the file into the "MT" bookkeeping directory, which could allow context-dependent attackers to execute arbitrary...

Design/Logic Flaw

Monotone 0.25 and earlier, when a user creates a file in a directory called "mt", and when checking out that file on a case-insensitive file system such as Windows or Mac OS X, places the file into the "MT" bookkeeping directory, which could allow context-dependent attackers to execute arbitrary...

CVE-2006-1166

CVE-2006-1166 affects Monotone 0.25 and earlier. When a user creates a file in a directory named “mt” and later checks out that file on a case-insensitive filesystem (e.g., Windows or macOS), the file is placed into the bookkeeping directory “MT.” This behavior could allow context-dependent attac...

CVE-2006-1166

Removed by vendor...

CVE-2006-1166

Monotone 0.25 and earlier, when a user creates a file in a directory called "mt", and when checking out that file on a case-insensitive file system such as Windows or Mac OS X, places the file into the "MT" bookkeeping directory, which could allow context-dependent attackers to execute arbitrary...