Perl libwww-perl (LWP) Module HTTP Header Arbitrary File Overwrite Vulnerability
BID:67710
Info
Perl libwww-perl (LWP) Module HTTP Header Arbitrary File Overwrite Vulnerability
| Bugtraq ID: | 67710 |
| Class: | Input Validation Error |
| CVE: |
CVE-2010-2253 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 10 2010 12:00AM |
| Updated: | Jun 10 2010 12:00AM |
| Credit: | Hank Leininger and Solar Designer |
| Vulnerable: |
Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server EUS 6.5.z Redhat Enterprise Linux Server AUS 6.5 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node 6 Redhat Enterprise Linux Desktop 6 Oracle Enterprise Linux 6 GNU wget 1.11.4 GNU wget 1.10.2 GNU wget 1.10.1 GNU wget 1.10 GNU wget 1.9.1 GNU wget 1.9 GNU wget 1.8.2 GNU wget 1.8.1 GNU wget 1.8 GNU wget 1.7.1 GNU wget 1.7 GNU wget 1.6 GNU wget 1.5.3 GNU wget 1.12 Gisle Aas Libwww-Perl 5.834 Gisle Aas Libwww-Perl 5.833 Gisle Aas Libwww-Perl 5.832 Gisle Aas Libwww-Perl 5.831 Gisle Aas Libwww-Perl 5.830 Gisle Aas Libwww-Perl 5.829 Gisle Aas Libwww-Perl 5.828 Gisle Aas Libwww-Perl 5.827 Gisle Aas Libwww-Perl 5.826 Gisle Aas Libwww-Perl 5.825 Gisle Aas Libwww-Perl 5.824 Gisle Aas Libwww-Perl 5.823 Gisle Aas Libwww-Perl 5.822 Gisle Aas Libwww-Perl 5.821 Gisle Aas Libwww-Perl 5.820 Gisle Aas Libwww-Perl 5.819 Gisle Aas Libwww-Perl 5.818 Gisle Aas Libwww-Perl 5.817 Gisle Aas Libwww-Perl 5.816 Gisle Aas Libwww-Perl 5.815 Gisle Aas Libwww-Perl 5.814 Gisle Aas Libwww-Perl 5.813 Gisle Aas Libwww-Perl 5.812 Gisle Aas Libwww-Perl 5.811 Gisle Aas Libwww-Perl 5.810 Gisle Aas Libwww-Perl 5.808 Gisle Aas Libwww-Perl 5.807 Gisle Aas Libwww-Perl 5.806 Gisle Aas Libwww-Perl 5.805 Gisle Aas Libwww-Perl 5.804 Gisle Aas Libwww-Perl 5.803 Gisle Aas Libwww-Perl 5.802 Gisle Aas Libwww-Perl 5.801 Gisle Aas Libwww-Perl 5.800 CentOS CentOS 6 Alexander V. Lukyanov lftp 2.6.10 Alexander V. Lukyanov lftp 2.6.9 Alexander V. Lukyanov lftp 2.6.8 Alexander V. Lukyanov lftp 2.6.7 Alexander V. Lukyanov lftp 2.6.6 Alexander V. Lukyanov lftp 2.6.5 Alexander V. Lukyanov lftp 2.6.4 Alexander V. Lukyanov lftp 2.6.3 Alexander V. Lukyanov lftp 2.5.2 Alexander V. Lukyanov lftp 2.4.9 Alexander V. Lukyanov lftp 2.3 Alexander V. Lukyanov lftp 4.0.5 Alexander V. Lukyanov lftp 4.0.4 Alexander V. Lukyanov lftp 4.0.3 Alexander V. Lukyanov lftp 4.0.2 Alexander V. Lukyanov lftp 4.0.1 Alexander V. Lukyanov lftp 4.0.0 |
| Not Vulnerable: |
Gisle Aas Libwww-Perl 5.835 Alexander V. Lukyanov lftp 4.0.6 |
Discussion
Perl libwww-perl (LWP) Module HTTP Header Arbitrary File Overwrite Vulnerability
The 'libwww-perl' module for Perl is prone to an arbitrary file-overwrite vulnerability.
Attackers can overwrite arbitrary files on the victim's computer in the context of the vulnerable application using the program. Due to the nature of this issue, arbitrary code execution may be possible; however, this has not been confirmed.
libwww-perl 5.834 and prior versions are vulnerable.
The 'libwww-perl' module for Perl is prone to an arbitrary file-overwrite vulnerability.
Attackers can overwrite arbitrary files on the victim's computer in the context of the vulnerable application using the program. Due to the nature of this issue, arbitrary code execution may be possible; however, this has not been confirmed.
libwww-perl 5.834 and prior versions are vulnerable.