CVE-2010-2253

CVE-2010-2253 describes a vulnerability in libwww-perl versions prior to 5.835, specifically within the lwp-download utility. This flaw allows remote servers to create or overwrite files with dot-prefixed filenames, potentially leading to arbitrary code execution if a sensitive dotfile in a user's home directory is targeted. The vulnerability carries a CVSS score of 6.8, indicating a medium severity with a network attack vector, medium access complexity, and potential for partial confidentiality, integrity, and availability impacts. Despite its age, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.