CVE-2010-2253

libwww-perl < 5.835 - Arbitrary File Write via lwp-download Filename Handling

Title source: llm
STIX 2.1

Description

lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . (dot) character, which allows remote servers to create or overwrite files via (1) a 3xx redirect to a URL with a crafted filename or (2) a Content-Disposition header that suggests a crafted filename, and possibly execute arbitrary code as a consequence of writing to a dotfile in a home directory.

References (10)

Core 10
Core References
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=602800
Mailing List mailing-list x_refsource_mlist
http://marc.info/?l=oss-security&m=127411372529485&w=2
Mailing List mailing-list x_refsource_mlist
http://marc.info/?l=oss-security&m=127611288927500&w=2
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050245.html
Various Sources x_refsource_misc
http://www.ocert.org/advisories/ocert-2010-001.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050232.html
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=591580
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-981-1
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/2872

Scores

EPSS 0.0329
EPSS Percentile 87.0%

Details

CWE
CWE-20
Status published
Products (50)
gisle_aas/libwww-perl 0.01
gisle_aas/libwww-perl 0.02
gisle_aas/libwww-perl 0.03
gisle_aas/libwww-perl 0.04
gisle_aas/libwww-perl 5.00
gisle_aas/libwww-perl 5.01
gisle_aas/libwww-perl 5.02
gisle_aas/libwww-perl 5.03
gisle_aas/libwww-perl 5.04
gisle_aas/libwww-perl 5.05
... and 40 more
Published Jul 06, 2010
Tracked Since Feb 18, 2026