CVE ID:	CVE-2017-9462
Description:	In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and consequently execute arbitrary code, by using --debugger as a repository name.
Test IDs:	1.3.6.1.4.1.25623.1.1.2.2017.1132   1.3.6.1.4.1.25623.1.0.703963   1.3.6.1.4.1.25623.1.0.872792   1.3.6.1.4.1.25623.1.1.2.2017.1133   1.3.6.1.4.1.25623.1.0.891005   1.3.6.1.4.1.25623.1.0.882746   1.3.6.1.4.1.25623.1.0.882744   1.3.6.1.4.1.25623.1.0.872793   1.3.6.1.4.1.25623.1.0.851567   1.3.6.1.4.1.25623.1.0.871836   1.3.6.1.4.1.25623.1.1.10.2017.0182   1.3.6.1.4.1.25623.1.0.891414
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2017-9462 BugTraq ID: 99123 http://www.securityfocus.com/bid/99123 Debian Security Information: DSA-3963 (Google Search) http://www.debian.org/security/2017/dsa-3963 https://security.gentoo.org/glsa/201709-18 https://lists.debian.org/debian-lts-announce/2018/07/msg00005.html RedHat Security Advisories: RHSA-2017:1576 https://access.redhat.com/errata/RHSA-2017:1576