Security Advisories (3)
CPANSA-libwww-perl-2017-01 (2017-11-06)

LWP::Protocol::file can open existent file from file:// scheme. However, current version of LWP uses open FILEHANDLE,EXPR and it has ability to execute arbitrary command

CVE-2011-0633 (2011-01-20)

The Net::HTTPS module in libwww-perl (LWP) before 6.00, as used in WWW::Mechanize, LWP::UserAgent, and other products, when running in environments that do not set the If-SSL-Cert-Subject header, does not enable full validation of SSL certificates by default, which allows remote attackers to spoof servers via man-in-the-middle (MITM) attacks involving hostnames that are not properly validated.

CVE-2010-2253 (2010-07-06)

lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . (dot) character, which allows remote servers to create or overwrite files via (1) a 3xx redirect to a URL with a crafted filename or (2) a Content-Disposition header that suggests a crafted filename, and possibly execute arbitrary code as a consequence of writing to a dotfile in a home directory.

Documentation

Fetch large files from the web
See what headers and content is returned for a URL
Simple mirror utility
Retrieve web documents recursively
The libwww-perl cookbook
An LWP Tutorial

Modules

install all libwww-perl related modules
parse directory listing
Class that represents an HTML form element
Configuration for request and response objects
HTTP cookie jars
access to Microsoft cookies files
access to Netscape cookies files
a simple http server class
date conversion routines
Class encapsulating HTTP Message headers
Header value parsing utility functions
HTTP style message (base class)
choose a variant to serve
HTTP style request message
Construct common HTTP::Request objects
HTTP style response message
HTTP Status code processing
LWP
The World-Wide Web library for Perl
Library for enabling NTLM authentication (Microsoft) in LWP
Connection cache manager
deprecated
guess media type for a file or a URL
Member access mixin class
Base class for LWP protocols
a class for well-behaved Web robots
simple procedural interface to LWP
Web user agent class
Low-level HTTP connection (client)
Non-blocking HTTP client
database of robots.txt-derived permissions
Persistent RobotRules

Provides

in lib/File/Listing.pm
in lib/File/Listing.pm
in lib/File/Listing.pm
in lib/File/Listing.pm
in lib/File/Listing.pm
in lib/HTML/Form.pm
in lib/HTML/Form.pm
in lib/HTML/Form.pm
in lib/HTML/Form.pm
in lib/HTML/Form.pm
in lib/HTML/Form.pm
in lib/HTML/Form.pm
in lib/HTML/Form.pm
in lib/HTTP/Daemon.pm
in lib/HTTP/Headers/Auth.pm
in lib/HTTP/Headers/ETag.pm
in lib/HTTP/Headers/Auth.pm
in lib/HTTP/Headers/ETag.pm
in lib/LWP/Authen/Basic.pm
in lib/LWP/Authen/Digest.pm
in lib/LWP/DebugFile.pm
in lib/LWP/Protocol/GHTTP.pm
in lib/LWP/Protocol/ftp.pm
in lib/LWP/Protocol/cpan.pm
in lib/LWP/Protocol/data.pm
in lib/LWP/Protocol/file.pm
in lib/LWP/Protocol/ftp.pm
in lib/LWP/Protocol/gopher.pm
in lib/LWP/Protocol/http.pm
in lib/LWP/Protocol/http10.pm
in lib/LWP/Protocol/http.pm
in lib/LWP/Protocol/http.pm
in lib/LWP/Protocol/https.pm
in lib/LWP/Protocol/https10.pm
in lib/LWP/Protocol/https.pm
in lib/LWP/Protocol/loopback.pm
in lib/LWP/Protocol/mailto.pm
in lib/LWP/Protocol/nntp.pm
in lib/LWP/Protocol/nogo.pm
in lib/Net/HTTP/Methods.pm
in lib/Net/HTTPS.pm
in lib/WWW/RobotRules.pm