First published: Wed Feb 09 2005(Updated: )
awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) "pluginmode", (2) "loadplugin", or (3) "noloadplugin" parameters.
Credit: security@debian.org
Affected Software | Affected Version | How to fix |
---|---|---|
Awstats Awstats | =5.7 | |
Awstats Awstats | =6.3 | |
Awstats Awstats | =5.9 | |
Awstats Awstats | =6.1 | |
Awstats Awstats | =6.2 | |
Awstats Awstats | =5.0 | |
Awstats Awstats | =5.2 | |
Awstats Awstats | =5.1 | |
Awstats Awstats | =4.0 | |
Awstats Awstats | =6.0 | |
Awstats Awstats | =5.4 | |
Awstats Awstats | =5.3 | |
Awstats Awstats | =5.8 | |
Awstats Awstats | =5.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.