Fedora 13 : perl-libwww-perl-5.837-2.fc13 (2010-15532)

Fix broken package dependencies CVE-2010-2253 lwp-download now needs the -s option to honor the Content-Disposition header CVE-2010-2253 lwp-download now needs the -s option to honor the Content-Disposition header Note that Tenable Network Security has extracted the preceding description block...

Fedora 14 : perl-libwww-perl-5.837-2.fc14 (2010-15405)

Fix broken package dependencies CVE-2010-2253 lwp-download now needs the -s option to honor the Content-Disposition header CVE-2010-2253 lwp-download now needs the -s option to honor the Content-Disposition header Note that Tenable Network Security has extracted the preceding description block...

[SECURITY] Fedora 13 Update: perl-libwww-perl-5.837-2.fc13

The libwww-perl collection is a set of Perl modules which provides a simple and consistent application programming interface to the World-Wide Web. The ma in focus of the library is to provide classes and functions that allow you to write WWW clients. The library also contain modules that are of...

FreeBSD Ports: p5-libwww

The remote host is missing an update to the system as announced in the referenced advisory. VID 3a7c5fc4-b50c-11df-977b-ecc31dd8ad06 OpenVAS Vulnerability Test $ Description: Auto generated from VID 3a7c5fc4-b50c-11df-977b-ecc31dd8ad06 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Mandriva Update for perl-libwww-perl MDVSA-2010:167 (perl-libwww-perl)

Check for the Version of perl-libwww-perl OpenVAS Vulnerability Test Mandriva Update for perl-libwww-perl MDVSA-2010:167 perl-libwww-perl Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribu...

Ubuntu Update for libwww-perl vulnerability USN-981-1

Ubuntu Update for Linux kernel vulnerabilities USN-981-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9811.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for libwww-perl vulnerability USN-981-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Mandriva Update for perl-libwww-perl MDVSA-2010:167 (perl-libwww-perl)

Check for the Version of perl-libwww-perl OpenVAS Vulnerability Test Mandriva Update for perl-libwww-perl MDVSA-2010:167 perl-libwww-perl Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribu...

Ubuntu: Security Advisory (USN-981-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

libwww-perl directory traversal

Directory traversal on file downloading in lwp-download...

[ MDVSA-2010:167 ] perl-libwww-perl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:167 http://www.mandriva.com/security/ Package : perl-libwww-perl Date : August 31, 2010 Affected: 2008.0, 2009.0, 2009.1, 2010.0, 2010.1, Corporate 4.0, Enterprise Server 5.0 Problem Description: A...

Mandriva Linux Security Advisory : perl-libwww-perl (MDVSA-2010:167)

A vulnerability has been found and corrected in perl-libwww-perl : lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . dot character, which allows remote servers to create or overwrite files via 1 a 3xx redirect to a URL with a crafted filename or 2...

Ubuntu 6.06 LTS / 8.04 LTS / 9.04 / 9.10 / 10.04 LTS : libwww-perl vulnerability (USN-981-1)

It was discovered that libwww-perl incorrectly filtered filenames suggested by Content-Disposition headers. If a user were tricked into downloading a file from a malicious site, a remote attacker could overwrite hidden files in the user's directory. Note that Tenable Network Security has extracte...

FreeBSD : p5-libwww -- possibility to remote servers to create file with a .(dot) character (3a7c5fc4-b50c-11df-977b-ecc31dd8ad06)

lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a .' dot character, which allows remote servers to create or overwrite files via a 3xx redirect to a URL with a crafted filename or a Content-Disposition header that suggests a crafted filename, and...

USN-981-1: libwww-perl vulnerability

It was discovered that libwww-perl incorrectly filtered filenames suggested by Content-Disposition headers. If a user were tricked into downloading a file from a malicious site, a remote attacker could overwrite hidden files in the user's directory...

CVE-2010-2253

lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . dot character, which allows remote servers to create or overwrite files via 1 a 3xx redirect to a URL with a crafted filename or 2 a Content-Disposition header that suggests a crafted filename, and...

DEBIAN-CVE-2010-2253

lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . dot character, which allows remote servers to create or overwrite files via 1 a 3xx redirect to a URL with a crafted filename or 2 a Content-Disposition header that suggests a crafted filename, and...

CVE-2010-2253

lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . dot character, which allows remote servers to create or overwrite files via 1 a 3xx redirect to a URL with a crafted filename or 2 a Content-Disposition header that suggests a crafted filename, and...

Directory traversal

lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . dot character, which allows remote servers to create or overwrite files via 1 a 3xx redirect to a URL with a crafted filename or 2 a Content-Disposition header that suggests a crafted filename, and...

CVE-2010-2253

CVE-2010-2253 affects libwww-perl’s lwp-download in versions before 5.835. A crafted filename via 3xx redirects or Content-Disposition can cause remote servers to create/overwrite dotfiles (e.g., in a home directory), potentially leading to arbitrary code execution. Affected component: lwp-downlo...

CVE-2010-2253

lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . dot character, which allows remote servers to create or overwrite files via 1 a 3xx redirect to a URL with a crafted filename or 2 a Content-Disposition header that suggests a crafted filename, and...