VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 12, 2006· Updated Jun 16, 2026

CVE-2006-1166

CVE-2006-1166

Description

Monotone 0.25 and earlier, when a user creates a file in a directory called "mt", and when checking out that file on a case-insensitive file system such as Windows or Mac OS X, places the file into the "MT" bookkeeping directory, which could allow context-dependent attackers to execute arbitrary Lua programs as the user running monotone.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Monotone/Monotone2 versions
    cpe:2.3:a:monotone:monotone:0.25:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:monotone:monotone:0.25:*:*:*:*:*:*:*
    • (no CPE)range: <=0.25

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.