CVE-2010-2253 : 상세 정보

CVE-2010-2253

1.13%V4
2010-07-06
14h00 +00:00
A03-Injection
Network
2024-08-07
02h25 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CVE 설명

lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . (dot) character, which allows remote servers to create or overwrite files via (1) a 3xx redirect to a URL with a crafted filename or (2) a Content-Disposition header that suggests a crafted filename, and possibly execute arbitrary code as a consequence of writing to a dotfile in a home directory.

CVE 정보

관련 약점

CWE-ID 약점 이름 출처
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

메트릭

메트릭 점수 심각도 CVSS 벡터 출처
V2 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P nvd@nist.gov

EPSS

EPSS는 취약점이 악용될 가능성을 예측하는 점수 모델입니다.

EPSS 점수

EPSS 모델은 0과 1(0~100%) 사이의 확률 점수를 생성합니다. 점수가 높을수록 취약점이 악용될 가능성이 높습니다.

EPSS 백분위수

백분위수는 EPSS 점수에 따라 CVE의 순위를 매기는 데 사용됩니다. 예를 들어 EPSS 점수 기준 95번째 백분위수의 CVE는 다른 CVE의 95%보다 악용될 가능성이 높습니다.

언급된 제품

구성 0

Gisle_aas>>Libwww-perl >> Version 0.01

Gisle_aas>>Libwww-perl >> Version 0.02

Gisle_aas>>Libwww-perl >> Version 0.03

Gisle_aas>>Libwww-perl >> Version 0.04

Gisle_aas>>Libwww-perl >> Version 5.00

Gisle_aas>>Libwww-perl >> Version 5.01

Gisle_aas>>Libwww-perl >> Version 5.02

Gisle_aas>>Libwww-perl >> Version 5.03

Gisle_aas>>Libwww-perl >> Version 5.04

Gisle_aas>>Libwww-perl >> Version 5.05

Gisle_aas>>Libwww-perl >> Version 5.06

Gisle_aas>>Libwww-perl >> Version 5.07

Gisle_aas>>Libwww-perl >> Version 5.08

Gisle_aas>>Libwww-perl >> Version 5.09

Gisle_aas>>Libwww-perl >> Version 5.10

Gisle_aas>>Libwww-perl >> Version 5.11

Gisle_aas>>Libwww-perl >> Version 5.12

Gisle_aas>>Libwww-perl >> Version 5.13

Gisle_aas>>Libwww-perl >> Version 5.14

Gisle_aas>>Libwww-perl >> Version 5.15

Gisle_aas>>Libwww-perl >> Version 5.16

Gisle_aas>>Libwww-perl >> Version 5.17

Gisle_aas>>Libwww-perl >> Version 5.18

Gisle_aas>>Libwww-perl >> Version 5.18_03

Gisle_aas>>Libwww-perl >> Version 5.18_04

Gisle_aas>>Libwww-perl >> Version 5.18_05

Gisle_aas>>Libwww-perl >> Version 5.19

Gisle_aas>>Libwww-perl >> Version 5.20

Gisle_aas>>Libwww-perl >> Version 5.21

Gisle_aas>>Libwww-perl >> Version 5.22

Gisle_aas>>Libwww-perl >> Version 5.30

Gisle_aas>>Libwww-perl >> Version 5.31

Gisle_aas>>Libwww-perl >> Version 5.32

Gisle_aas>>Libwww-perl >> Version 5.33

Gisle_aas>>Libwww-perl >> Version 5.34

Gisle_aas>>Libwww-perl >> Version 5.35

Gisle_aas>>Libwww-perl >> Version 5.36

Gisle_aas>>Libwww-perl >> Version 5.41

Gisle_aas>>Libwww-perl >> Version 5.42

Gisle_aas>>Libwww-perl >> Version 5.43

Gisle_aas>>Libwww-perl >> Version 5.44

Gisle_aas>>Libwww-perl >> Version 5.45

Gisle_aas>>Libwww-perl >> Version 5.46

Gisle_aas>>Libwww-perl >> Version 5.47

Gisle_aas>>Libwww-perl >> Version 5.48

Gisle_aas>>Libwww-perl >> Version 5.49

Gisle_aas>>Libwww-perl >> Version 5.50

Gisle_aas>>Libwww-perl >> Version 5.51

Gisle_aas>>Libwww-perl >> Version 5.52

Gisle_aas>>Libwww-perl >> Version 5.53

Gisle_aas>>Libwww-perl >> Version 5.53_90

Gisle_aas>>Libwww-perl >> Version 5.53_91

Gisle_aas>>Libwww-perl >> Version 5.53_92

Gisle_aas>>Libwww-perl >> Version 5.53_93

Gisle_aas>>Libwww-perl >> Version 5.53_94

Gisle_aas>>Libwww-perl >> Version 5.53_95

Gisle_aas>>Libwww-perl >> Version 5.53_96

Gisle_aas>>Libwww-perl >> Version 5.53_97

Gisle_aas>>Libwww-perl >> Version 5.60

Gisle_aas>>Libwww-perl >> Version 5.61

Gisle_aas>>Libwww-perl >> Version 5.62

Gisle_aas>>Libwww-perl >> Version 5.63

Gisle_aas>>Libwww-perl >> Version 5.64

Gisle_aas>>Libwww-perl >> Version 5.65

Gisle_aas>>Libwww-perl >> Version 5.66

Gisle_aas>>Libwww-perl >> Version 5.67

Gisle_aas>>Libwww-perl >> Version 5.68

Gisle_aas>>Libwww-perl >> Version 5.69

Gisle_aas>>Libwww-perl >> Version 5.70

Gisle_aas>>Libwww-perl >> Version 5.71

Gisle_aas>>Libwww-perl >> Version 5.72

Gisle_aas>>Libwww-perl >> Version 5.73

Gisle_aas>>Libwww-perl >> Version 5.74

Gisle_aas>>Libwww-perl >> Version 5.75

Gisle_aas>>Libwww-perl >> Version 5.76

Gisle_aas>>Libwww-perl >> Version 5.77

Gisle_aas>>Libwww-perl >> Version 5.78

Gisle_aas>>Libwww-perl >> Version 5.79

Gisle_aas>>Libwww-perl >> Version 5.800

Gisle_aas>>Libwww-perl >> Version 5.801

Gisle_aas>>Libwww-perl >> Version 5.802

Gisle_aas>>Libwww-perl >> Version 5.803

Gisle_aas>>Libwww-perl >> Version 5.804

Gisle_aas>>Libwww-perl >> Version 5.805

Gisle_aas>>Libwww-perl >> Version 5.806

Gisle_aas>>Libwww-perl >> Version 5.807

Gisle_aas>>Libwww-perl >> Version 5.808

Gisle_aas>>Libwww-perl >> Version 5.810

Gisle_aas>>Libwww-perl >> Version 5.811

Gisle_aas>>Libwww-perl >> Version 5.812

Gisle_aas>>Libwww-perl >> Version 5.813

Gisle_aas>>Libwww-perl >> Version 5.814

Gisle_aas>>Libwww-perl >> Version 5.815

Gisle_aas>>Libwww-perl >> Version 5.816

Gisle_aas>>Libwww-perl >> Version 5.817

Gisle_aas>>Libwww-perl >> Version 5.818

Gisle_aas>>Libwww-perl >> Version 5.819

Gisle_aas>>Libwww-perl >> Version 5.820

Gisle_aas>>Libwww-perl >> Version 5.821

Gisle_aas>>Libwww-perl >> Version 5.822

Gisle_aas>>Libwww-perl >> Version 5.823

Gisle_aas>>Libwww-perl >> Version 5.824

Gisle_aas>>Libwww-perl >> Version 5.825

Gisle_aas>>Libwww-perl >> Version 5.826

Gisle_aas>>Libwww-perl >> Version 5.827

Gisle_aas>>Libwww-perl >> Version 5.828

Gisle_aas>>Libwww-perl >> Version 5.829

Gisle_aas>>Libwww-perl >> Version 5.830

Gisle_aas>>Libwww-perl >> Version 5.831

Gisle_aas>>Libwww-perl >> Version 5.832

Gisle_aas>>Libwww-perl >> Version 5.833

Gisle_aas>>Libwww-perl >> Version 5b5

Gisle_aas>>Libwww-perl >> Version 5b6

Gisle_aas>>Libwww-perl >> Version 5b7

Gisle_aas>>Libwww-perl >> Version 5b8

Gisle_aas>>Libwww-perl >> Version 5b9

Gisle_aas>>Libwww-perl >> Version 5b10

Gisle_aas>>Libwww-perl >> Version 5b11

Gisle_aas>>Libwww-perl >> Version 5b12

Gisle_aas>>Libwww-perl >> Version 5b13

Search.cpan>>Libwww-perl >> Version 까지 (포함) 5.834

Search.cpan>>Libwww-perl >> Version 5.40_01

참고 자료

http://marc.info/?l=oss-security&m=127411372529485&w=2
Tags : mailing-list, x_refsource_MLIST
http://marc.info/?l=oss-security&m=127611288927500&w=2
Tags : mailing-list, x_refsource_MLIST
http://www.ubuntu.com/usn/USN-981-1
Tags : vendor-advisory, x_refsource_UBUNTU
http://www.vupen.com/english/advisories/2010/2872
Tags : vdb-entry, x_refsource_VUPEN