GNU Wget 1.12 and earlier uses a server-provided filename instead of the original URL to determine the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a 3xx redirect to a URL with a .wgetrc filename followed by a 3xx redirect to a URL with a crafted filename, and possibly execute arbitrary code as a consequence of writing to a dotfile in a home directory.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2010-07-06T14:00:00

Updated: 2024-08-07T02:25:07.646Z

Reserved: 2010-06-09T00:00:00

Link: CVE-2010-2252

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2010-07-06T17:17:13.313

Modified: 2016-11-28T19:07:16.483

Link: CVE-2010-2252

cve-icon Redhat

Severity : Low

Publid Date: 2010-05-17T00:00:00Z

Links: CVE-2010-2252 - Bugzilla