CVE-2010-2252

Source
https://nvd.nist.gov/vuln/detail/CVE-2010-2252
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2010-2252.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2010-2252
Downstream
Related
Published
2010-07-06T17:17:13Z
Modified
2025-08-09T19:01:28Z
Summary
[none]
Details

GNU Wget 1.12 and earlier uses a server-provided filename instead of the original URL to determine the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a 3xx redirect to a URL with a .wgetrc filename followed by a 3xx redirect to a URL with a crafted filename, and possibly execute arbitrary code as a consequence of writing to a dotfile in a home directory.

References

Affected packages