CVE-2005-0435: Medium severity Awstats AWStats vulnerability
Published Feb 15, 2005
·Updated
awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to read server web logs by setting the loadplugin and pluginmode parameters to rawlog.
Affected Software
2 affected components
Awstats AWStats=6.3
Awstats AWStats=6.4
Remediation
Patch Available
Event History
Feb 15, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0435?
CVE-2005-0435 is considered a moderate severity vulnerability that allows unauthorized access to web server logs.
2
How do I fix CVE-2005-0435?
To fix CVE-2005-0435, upgrade AWStats to a version later than 6.4 that addresses this vulnerability.
3
What are the affected versions for CVE-2005-0435?
CVE-2005-0435 affects AWStats versions 6.3 and 6.4.
4
What does CVE-2005-0435 exploit?
CVE-2005-0435 can be exploited by an attacker manipulating the loadplugin and pluginmode parameters to read server web logs.
5
Is CVE-2005-0435 easy to exploit?
CVE-2005-0435 can be easily exploited by a remote attacker with knowledge of the affected parameters.