CVE-2010-2253
06.07.2010, 17:17
lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . (dot) character, which allows remote servers to create or overwrite files via (1) a 3xx redirect to a URL with a crafted filename or (2) a Content-Disposition header that suggests a crafted filename, and possibly execute arbitrary code as a consequence of writing to a dotfile in a home directory.Enginsight
| Vendor | Product | Version |
|---|---|---|
| gisle_aas | libwww-perl | 0.01 |
| gisle_aas | libwww-perl | 0.02 |
| gisle_aas | libwww-perl | 0.03 |
| gisle_aas | libwww-perl | 0.04 |
| gisle_aas | libwww-perl | 5.00 |
| gisle_aas | libwww-perl | 5.01 |
| gisle_aas | libwww-perl | 5.02 |
| gisle_aas | libwww-perl | 5.03 |
| gisle_aas | libwww-perl | 5.04 |
| gisle_aas | libwww-perl | 5.05 |
| gisle_aas | libwww-perl | 5.06 |
| gisle_aas | libwww-perl | 5.07 |
| gisle_aas | libwww-perl | 5.08 |
| gisle_aas | libwww-perl | 5.09 |
| gisle_aas | libwww-perl | 5.10 |
| gisle_aas | libwww-perl | 5.11 |
| gisle_aas | libwww-perl | 5.12 |
| gisle_aas | libwww-perl | 5.13 |
| gisle_aas | libwww-perl | 5.14 |
| gisle_aas | libwww-perl | 5.15 |
| gisle_aas | libwww-perl | 5.16 |
| gisle_aas | libwww-perl | 5.17 |
| gisle_aas | libwww-perl | 5.18 |
| gisle_aas | libwww-perl | 5.18_03:_03 |
| gisle_aas | libwww-perl | 5.18_04:_04 |
| gisle_aas | libwww-perl | 5.18_05:_05 |
| gisle_aas | libwww-perl | 5.19 |
| gisle_aas | libwww-perl | 5.20 |
| gisle_aas | libwww-perl | 5.21 |
| gisle_aas | libwww-perl | 5.22 |
| gisle_aas | libwww-perl | 5.30 |
| gisle_aas | libwww-perl | 5.31 |
| gisle_aas | libwww-perl | 5.32 |
| gisle_aas | libwww-perl | 5.33 |
| gisle_aas | libwww-perl | 5.34 |
| gisle_aas | libwww-perl | 5.35 |
| gisle_aas | libwww-perl | 5.36 |
| gisle_aas | libwww-perl | 5.41 |
| gisle_aas | libwww-perl | 5.42 |
| gisle_aas | libwww-perl | 5.43 |
| gisle_aas | libwww-perl | 5.44 |
| gisle_aas | libwww-perl | 5.45 |
| gisle_aas | libwww-perl | 5.46 |
| gisle_aas | libwww-perl | 5.47 |
| gisle_aas | libwww-perl | 5.48 |
| gisle_aas | libwww-perl | 5.49 |
| gisle_aas | libwww-perl | 5.50 |
| gisle_aas | libwww-perl | 5.51 |
| gisle_aas | libwww-perl | 5.52 |
| gisle_aas | libwww-perl | 5.53 |
| gisle_aas | libwww-perl | 5.53_90:_90 |
| gisle_aas | libwww-perl | 5.53_91:_91 |
| gisle_aas | libwww-perl | 5.53_92:_92 |
| gisle_aas | libwww-perl | 5.53_93:_93 |
| gisle_aas | libwww-perl | 5.53_94:_94 |
| gisle_aas | libwww-perl | 5.53_95:_95 |
| gisle_aas | libwww-perl | 5.53_96:_96 |
| gisle_aas | libwww-perl | 5.53_97:_97 |
| gisle_aas | libwww-perl | 5.60 |
| gisle_aas | libwww-perl | 5.61 |
| gisle_aas | libwww-perl | 5.62 |
| gisle_aas | libwww-perl | 5.63 |
| gisle_aas | libwww-perl | 5.64 |
| gisle_aas | libwww-perl | 5.65 |
| gisle_aas | libwww-perl | 5.66 |
| gisle_aas | libwww-perl | 5.67 |
| gisle_aas | libwww-perl | 5.68 |
| gisle_aas | libwww-perl | 5.69 |
| gisle_aas | libwww-perl | 5.70 |
| gisle_aas | libwww-perl | 5.71 |
| gisle_aas | libwww-perl | 5.72 |
| gisle_aas | libwww-perl | 5.73 |
| gisle_aas | libwww-perl | 5.74 |
| gisle_aas | libwww-perl | 5.75 |
| gisle_aas | libwww-perl | 5.76 |
| gisle_aas | libwww-perl | 5.77 |
| gisle_aas | libwww-perl | 5.78 |
| gisle_aas | libwww-perl | 5.79 |
| gisle_aas | libwww-perl | 5.800 |
| gisle_aas | libwww-perl | 5.801 |
| gisle_aas | libwww-perl | 5.802 |
| gisle_aas | libwww-perl | 5.803 |
| gisle_aas | libwww-perl | 5.804 |
| gisle_aas | libwww-perl | 5.805 |
| gisle_aas | libwww-perl | 5.806 |
| gisle_aas | libwww-perl | 5.807 |
| gisle_aas | libwww-perl | 5.808 |
| gisle_aas | libwww-perl | 5.810 |
| gisle_aas | libwww-perl | 5.811 |
| gisle_aas | libwww-perl | 5.812 |
| gisle_aas | libwww-perl | 5.813 |
| gisle_aas | libwww-perl | 5.814 |
| gisle_aas | libwww-perl | 5.815 |
| gisle_aas | libwww-perl | 5.816 |
| gisle_aas | libwww-perl | 5.817 |
| gisle_aas | libwww-perl | 5.818 |
| gisle_aas | libwww-perl | 5.819 |
| gisle_aas | libwww-perl | 5.820 |
| gisle_aas | libwww-perl | 5.821 |
| gisle_aas | libwww-perl | 5.822 |
| gisle_aas | libwww-perl | 5.823 |
| gisle_aas | libwww-perl | 5.824 |
| gisle_aas | libwww-perl | 5.825 |
| gisle_aas | libwww-perl | 5.826 |
| gisle_aas | libwww-perl | 5.827 |
| gisle_aas | libwww-perl | 5.828 |
| gisle_aas | libwww-perl | 5.829 |
| gisle_aas | libwww-perl | 5.830 |
| gisle_aas | libwww-perl | 5.831 |
| gisle_aas | libwww-perl | 5.832 |
| gisle_aas | libwww-perl | 5.833 |
| search.cpan | libwww-perl | 𝑥 ≤ 5.834 |
| search.cpan | libwww-perl | 5.40_01:_01 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References