lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that…
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- —
- Confidentiality · integrity · availability
- Partial · Partial · Partial
- Fix status
- Will not fix Red Hat: no fix planned
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.
Summary
lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . (dot) character, which allows remote servers to create or overwrite files via (1) a 3xx redirect to a URL with a crafted filename or (2) a Content-Disposition header that suggests a crafted filename, and possibly execute arbitrary code as a consequence of writing to a dotfile in a home directory.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 122
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:gisle_aas:libwww-perl:0.01:*:*:*:*:*:*:* | 0.01 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:0.02:*:*:*:*:*:*:* | 0.02 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:0.03:*:*:*:*:*:*:* | 0.03 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:0.04:*:*:*:*:*:*:* | 0.04 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.00:*:*:*:*:*:*:* | 5.00 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.01:*:*:*:*:*:*:* | 5.01 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.02:*:*:*:*:*:*:* | 5.02 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.03:*:*:*:*:*:*:* | 5.03 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.04:*:*:*:*:*:*:* | 5.04 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.05:*:*:*:*:*:*:* | 5.05 | Vulnerable | Gisle Aas |
- cpe:2.3:a:gisle_aas:libwww-perl:0.01:*:*:*:*:*:*:* Versions 0.01 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:0.02:*:*:*:*:*:*:* Versions 0.02 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:0.03:*:*:*:*:*:*:* Versions 0.03 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:0.04:*:*:*:*:*:*:* Versions 0.04 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.00:*:*:*:*:*:*:* Versions 5.00 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.01:*:*:*:*:*:*:* Versions 5.01 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.02:*:*:*:*:*:*:* Versions 5.02 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.03:*:*:*:*:*:*:* Versions 5.03 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.04:*:*:*:*:*:*:* Versions 5.04 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.05:*:*:*:*:*:*:* Versions 5.05 Vulnerable ·Gisle Aas
Show 112 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:gisle_aas:libwww-perl:5.06:*:*:*:*:*:*:* | 5.06 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.07:*:*:*:*:*:*:* | 5.07 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.08:*:*:*:*:*:*:* | 5.08 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.09:*:*:*:*:*:*:* | 5.09 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.10:*:*:*:*:*:*:* | 5.10 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.11:*:*:*:*:*:*:* | 5.11 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.12:*:*:*:*:*:*:* | 5.12 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.13:*:*:*:*:*:*:* | 5.13 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.14:*:*:*:*:*:*:* | 5.14 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.15:*:*:*:*:*:*:* | 5.15 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.16:*:*:*:*:*:*:* | 5.16 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.17:*:*:*:*:*:*:* | 5.17 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.18:*:*:*:*:*:*:* | 5.18 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.18_03:*:*:*:*:*:*:* | 5.18_03 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.18_04:*:*:*:*:*:*:* | 5.18_04 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.18_05:*:*:*:*:*:*:* | 5.18_05 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.19:*:*:*:*:*:*:* | 5.19 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.20:*:*:*:*:*:*:* | 5.20 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.21:*:*:*:*:*:*:* | 5.21 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.22:*:*:*:*:*:*:* | 5.22 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.30:*:*:*:*:*:*:* | 5.30 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.31:*:*:*:*:*:*:* | 5.31 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.32:*:*:*:*:*:*:* | 5.32 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.33:*:*:*:*:*:*:* | 5.33 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.34:*:*:*:*:*:*:* | 5.34 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.35:*:*:*:*:*:*:* | 5.35 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.36:*:*:*:*:*:*:* | 5.36 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.41:*:*:*:*:*:*:* | 5.41 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.42:*:*:*:*:*:*:* | 5.42 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.43:*:*:*:*:*:*:* | 5.43 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.44:*:*:*:*:*:*:* | 5.44 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.45:*:*:*:*:*:*:* | 5.45 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.46:*:*:*:*:*:*:* | 5.46 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.47:*:*:*:*:*:*:* | 5.47 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.48:*:*:*:*:*:*:* | 5.48 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.49:*:*:*:*:*:*:* | 5.49 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.50:*:*:*:*:*:*:* | 5.50 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.51:*:*:*:*:*:*:* | 5.51 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.52:*:*:*:*:*:*:* | 5.52 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.53:*:*:*:*:*:*:* | 5.53 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.53_90:*:*:*:*:*:*:* | 5.53_90 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.53_91:*:*:*:*:*:*:* | 5.53_91 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.53_92:*:*:*:*:*:*:* | 5.53_92 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.53_93:*:*:*:*:*:*:* | 5.53_93 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.53_94:*:*:*:*:*:*:* | 5.53_94 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.53_95:*:*:*:*:*:*:* | 5.53_95 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.53_96:*:*:*:*:*:*:* | 5.53_96 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.53_97:*:*:*:*:*:*:* | 5.53_97 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.60:*:*:*:*:*:*:* | 5.60 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.61:*:*:*:*:*:*:* | 5.61 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.62:*:*:*:*:*:*:* | 5.62 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.63:*:*:*:*:*:*:* | 5.63 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.64:*:*:*:*:*:*:* | 5.64 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.65:*:*:*:*:*:*:* | 5.65 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.66:*:*:*:*:*:*:* | 5.66 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.67:*:*:*:*:*:*:* | 5.67 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.68:*:*:*:*:*:*:* | 5.68 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.69:*:*:*:*:*:*:* | 5.69 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.70:*:*:*:*:*:*:* | 5.70 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.71:*:*:*:*:*:*:* | 5.71 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.72:*:*:*:*:*:*:* | 5.72 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.73:*:*:*:*:*:*:* | 5.73 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.74:*:*:*:*:*:*:* | 5.74 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.75:*:*:*:*:*:*:* | 5.75 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.76:*:*:*:*:*:*:* | 5.76 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.77:*:*:*:*:*:*:* | 5.77 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.78:*:*:*:*:*:*:* | 5.78 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.79:*:*:*:*:*:*:* | 5.79 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.800:*:*:*:*:*:*:* | 5.800 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.801:*:*:*:*:*:*:* | 5.801 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.802:*:*:*:*:*:*:* | 5.802 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.803:*:*:*:*:*:*:* | 5.803 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.804:*:*:*:*:*:*:* | 5.804 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.805:*:*:*:*:*:*:* | 5.805 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.806:*:*:*:*:*:*:* | 5.806 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.807:*:*:*:*:*:*:* | 5.807 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.808:*:*:*:*:*:*:* | 5.808 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.810:*:*:*:*:*:*:* | 5.810 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.811:*:*:*:*:*:*:* | 5.811 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.812:*:*:*:*:*:*:* | 5.812 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.813:*:*:*:*:*:*:* | 5.813 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.814:*:*:*:*:*:*:* | 5.814 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.815:*:*:*:*:*:*:* | 5.815 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.816:*:*:*:*:*:*:* | 5.816 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.817:*:*:*:*:*:*:* | 5.817 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.818:*:*:*:*:*:*:* | 5.818 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.819:*:*:*:*:*:*:* | 5.819 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.820:*:*:*:*:*:*:* | 5.820 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.821:*:*:*:*:*:*:* | 5.821 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.822:*:*:*:*:*:*:* | 5.822 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.823:*:*:*:*:*:*:* | 5.823 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.824:*:*:*:*:*:*:* | 5.824 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.825:*:*:*:*:*:*:* | 5.825 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.826:*:*:*:*:*:*:* | 5.826 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.827:*:*:*:*:*:*:* | 5.827 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.828:*:*:*:*:*:*:* | 5.828 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.829:*:*:*:*:*:*:* | 5.829 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.830:*:*:*:*:*:*:* | 5.830 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.831:*:*:*:*:*:*:* | 5.831 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.832:*:*:*:*:*:*:* | 5.832 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5.833:*:*:*:*:*:*:* | 5.833 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5b5:*:*:*:*:*:*:* | 5b5 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5b6:*:*:*:*:*:*:* | 5b6 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5b7:*:*:*:*:*:*:* | 5b7 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5b8:*:*:*:*:*:*:* | 5b8 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5b9:*:*:*:*:*:*:* | 5b9 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5b10:*:*:*:*:*:*:* | 5b10 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5b11:*:*:*:*:*:*:* | 5b11 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5b12:*:*:*:*:*:*:* | 5b12 | Vulnerable | Gisle Aas |
| cpe:2.3:a:gisle_aas:libwww-perl:5b13:*:*:*:*:*:*:* | 5b13 | Vulnerable | Gisle Aas |
| cpe:2.3:a:search.cpan:libwww-perl:*:*:*:*:*:*:*:* | up to 5.834 | Vulnerable | Search.cpan |
| cpe:2.3:a:search.cpan:libwww-perl:5.40_01:*:*:*:*:*:*:* | 5.40_01 | Vulnerable | Search.cpan |
- cpe:2.3:a:gisle_aas:libwww-perl:5.06:*:*:*:*:*:*:* Versions 5.06 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.07:*:*:*:*:*:*:* Versions 5.07 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.08:*:*:*:*:*:*:* Versions 5.08 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.09:*:*:*:*:*:*:* Versions 5.09 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.10:*:*:*:*:*:*:* Versions 5.10 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.11:*:*:*:*:*:*:* Versions 5.11 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.12:*:*:*:*:*:*:* Versions 5.12 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.13:*:*:*:*:*:*:* Versions 5.13 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.14:*:*:*:*:*:*:* Versions 5.14 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.15:*:*:*:*:*:*:* Versions 5.15 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.16:*:*:*:*:*:*:* Versions 5.16 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.17:*:*:*:*:*:*:* Versions 5.17 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.18:*:*:*:*:*:*:* Versions 5.18 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.18_03:*:*:*:*:*:*:* Versions 5.18_03 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.18_04:*:*:*:*:*:*:* Versions 5.18_04 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.18_05:*:*:*:*:*:*:* Versions 5.18_05 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.19:*:*:*:*:*:*:* Versions 5.19 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.20:*:*:*:*:*:*:* Versions 5.20 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.21:*:*:*:*:*:*:* Versions 5.21 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.22:*:*:*:*:*:*:* Versions 5.22 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.30:*:*:*:*:*:*:* Versions 5.30 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.31:*:*:*:*:*:*:* Versions 5.31 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.32:*:*:*:*:*:*:* Versions 5.32 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.33:*:*:*:*:*:*:* Versions 5.33 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.34:*:*:*:*:*:*:* Versions 5.34 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.35:*:*:*:*:*:*:* Versions 5.35 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.36:*:*:*:*:*:*:* Versions 5.36 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.41:*:*:*:*:*:*:* Versions 5.41 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.42:*:*:*:*:*:*:* Versions 5.42 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.43:*:*:*:*:*:*:* Versions 5.43 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.44:*:*:*:*:*:*:* Versions 5.44 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.45:*:*:*:*:*:*:* Versions 5.45 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.46:*:*:*:*:*:*:* Versions 5.46 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.47:*:*:*:*:*:*:* Versions 5.47 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.48:*:*:*:*:*:*:* Versions 5.48 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.49:*:*:*:*:*:*:* Versions 5.49 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.50:*:*:*:*:*:*:* Versions 5.50 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.51:*:*:*:*:*:*:* Versions 5.51 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.52:*:*:*:*:*:*:* Versions 5.52 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.53:*:*:*:*:*:*:* Versions 5.53 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.53_90:*:*:*:*:*:*:* Versions 5.53_90 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.53_91:*:*:*:*:*:*:* Versions 5.53_91 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.53_92:*:*:*:*:*:*:* Versions 5.53_92 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.53_93:*:*:*:*:*:*:* Versions 5.53_93 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.53_94:*:*:*:*:*:*:* Versions 5.53_94 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.53_95:*:*:*:*:*:*:* Versions 5.53_95 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.53_96:*:*:*:*:*:*:* Versions 5.53_96 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.53_97:*:*:*:*:*:*:* Versions 5.53_97 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.60:*:*:*:*:*:*:* Versions 5.60 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.61:*:*:*:*:*:*:* Versions 5.61 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.62:*:*:*:*:*:*:* Versions 5.62 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.63:*:*:*:*:*:*:* Versions 5.63 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.64:*:*:*:*:*:*:* Versions 5.64 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.65:*:*:*:*:*:*:* Versions 5.65 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.66:*:*:*:*:*:*:* Versions 5.66 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.67:*:*:*:*:*:*:* Versions 5.67 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.68:*:*:*:*:*:*:* Versions 5.68 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.69:*:*:*:*:*:*:* Versions 5.69 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.70:*:*:*:*:*:*:* Versions 5.70 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.71:*:*:*:*:*:*:* Versions 5.71 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.72:*:*:*:*:*:*:* Versions 5.72 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.73:*:*:*:*:*:*:* Versions 5.73 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.74:*:*:*:*:*:*:* Versions 5.74 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.75:*:*:*:*:*:*:* Versions 5.75 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.76:*:*:*:*:*:*:* Versions 5.76 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.77:*:*:*:*:*:*:* Versions 5.77 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.78:*:*:*:*:*:*:* Versions 5.78 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.79:*:*:*:*:*:*:* Versions 5.79 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.800:*:*:*:*:*:*:* Versions 5.800 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.801:*:*:*:*:*:*:* Versions 5.801 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.802:*:*:*:*:*:*:* Versions 5.802 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.803:*:*:*:*:*:*:* Versions 5.803 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.804:*:*:*:*:*:*:* Versions 5.804 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.805:*:*:*:*:*:*:* Versions 5.805 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.806:*:*:*:*:*:*:* Versions 5.806 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.807:*:*:*:*:*:*:* Versions 5.807 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.808:*:*:*:*:*:*:* Versions 5.808 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.810:*:*:*:*:*:*:* Versions 5.810 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.811:*:*:*:*:*:*:* Versions 5.811 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.812:*:*:*:*:*:*:* Versions 5.812 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.813:*:*:*:*:*:*:* Versions 5.813 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.814:*:*:*:*:*:*:* Versions 5.814 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.815:*:*:*:*:*:*:* Versions 5.815 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.816:*:*:*:*:*:*:* Versions 5.816 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.817:*:*:*:*:*:*:* Versions 5.817 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.818:*:*:*:*:*:*:* Versions 5.818 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.819:*:*:*:*:*:*:* Versions 5.819 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.820:*:*:*:*:*:*:* Versions 5.820 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.821:*:*:*:*:*:*:* Versions 5.821 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.822:*:*:*:*:*:*:* Versions 5.822 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.823:*:*:*:*:*:*:* Versions 5.823 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.824:*:*:*:*:*:*:* Versions 5.824 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.825:*:*:*:*:*:*:* Versions 5.825 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.826:*:*:*:*:*:*:* Versions 5.826 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.827:*:*:*:*:*:*:* Versions 5.827 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.828:*:*:*:*:*:*:* Versions 5.828 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.829:*:*:*:*:*:*:* Versions 5.829 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.830:*:*:*:*:*:*:* Versions 5.830 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.831:*:*:*:*:*:*:* Versions 5.831 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.832:*:*:*:*:*:*:* Versions 5.832 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5.833:*:*:*:*:*:*:* Versions 5.833 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5b5:*:*:*:*:*:*:* Versions 5b5 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5b6:*:*:*:*:*:*:* Versions 5b6 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5b7:*:*:*:*:*:*:* Versions 5b7 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5b8:*:*:*:*:*:*:* Versions 5b8 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5b9:*:*:*:*:*:*:* Versions 5b9 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5b10:*:*:*:*:*:*:* Versions 5b10 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5b11:*:*:*:*:*:*:* Versions 5b11 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5b12:*:*:*:*:*:*:* Versions 5b12 Vulnerable ·Gisle Aas
- cpe:2.3:a:gisle_aas:libwww-perl:5b13:*:*:*:*:*:*:* Versions 5b13 Vulnerable ·Gisle Aas
- cpe:2.3:a:search.cpan:libwww-perl:*:*:*:*:*:*:*:* Versions up to 5.834 Vulnerable ·Search.cpan
- cpe:2.3:a:search.cpan:libwww-perl:5.40_01:*:*:*:*:*:*:* Versions 5.40_01 Vulnerable ·Search.cpan
Remediation
No fixed version listed by the sources yet.
Vendor assessments
Red Hat
Red Hat rating: Low. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 4 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux 5 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux 6 | Affected | No fix planned: Will not fix |
Timeline
- 2026-10-02 Threatist record created from CVE-2010-2253
- 2026-10-03 Alias added: GHSA-mcrm-9w8r-c6w8
References
Other 7
- https://bugzilla.redhat.com/show_bug.cgi?id=602800
- [oss-security] 20100517 [oCERT-2010-001] multiple http client unexpected download filename vulnerability
- http://cpansearch.perl.org/src/GAAS/libwww-perl-5.836/Changes
- [oss-security] 20100609 Re: [oCERT-2010-001] multiple http client unexpected download filename vulnerability
- http://www.ocert.org/advisories/ocert-2010-001.html
- https://bugzilla.redhat.com/show_bug.cgi?id=591580
- ADV-2010-2872
Sources
- CVE-2010-2253 · CVE Program
- CVE-2010-2253 · NVD
- FIRST EPSS
- GHSA-mcrm-9w8r-c6w8 · GitHub Advisory Database · CC BY 4.0
- CVE-2010-2253 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences