CVE-2005-0362: Medium severity Awstats AWStats vulnerability
Published Feb 9, 2005
·Updated
awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) "pluginmode", (2) "loadplugin", or (3) "noloadplugin" parameters.
Affected Software
14 affected components
Awstats AWStats=4.0
Awstats AWStats=5.0
Awstats AWStats=5.1
Awstats AWStats=5.2
Awstats AWStats=5.3
Awstats AWStats=5.4
Awstats AWStats=5.5
Awstats AWStats=5.7
Awstats AWStats=5.8
Awstats AWStats=5.9
Awstats AWStats=6.0
Awstats AWStats=6.1
Awstats AWStats=6.2
Awstats AWStats=6.3
Event History
Feb 9, 2005
CVE Published
05:00 AM
Feb 16, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0362?
CVE-2005-0362 is considered a high severity vulnerability due to its potential for arbitrary command execution.
2
How do I fix CVE-2005-0362?
To fix CVE-2005-0362, upgrade to AWStats version 6.3 or later, which addresses this vulnerability.
3
What versions of AWStats are affected by CVE-2005-0362?
CVE-2005-0362 affects AWStats versions from 6.2 and earlier.
4
Can I be attacked through CVE-2005-0362?
Yes, if you are using a vulnerable version of AWStats, you can be exploited remotely through crafted parameters.
5
What types of attacks are possible with CVE-2005-0362?
CVE-2005-0362 allows remote attackers to execute arbitrary commands on the server, leading to potential data compromise or system control.