CVE-2006-2237: Medium severity Awstats AWStats vulnerability
Published May 8, 2006
·Updated
The web interface for AWStats 6.4 and 6.5, when statistics updates are enabled, allows remote attackers to execute arbitrary code via shell metacharacters in the migrate parameter.
Affected Software
2 affected components
Awstats AWStats=6.5
Awstats AWStats=6.4
Remediation
Patch Available
Patch Available
Event History
May 8, 2006
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-2237?
CVE-2006-2237 is considered to be a high severity vulnerability due to its ability to allow remote code execution.
2
How do I fix CVE-2006-2237?
To fix CVE-2006-2237, upgrade AWStats to version 6.6 or later, which includes security patches addressing this vulnerability.
3
What software versions are affected by CVE-2006-2237?
CVE-2006-2237 affects AWStats versions 6.4 and 6.5.
4
What type of attack does CVE-2006-2237 allow?
CVE-2006-2237 allows remote attackers to execute arbitrary code on the affected systems.
5
When was CVE-2006-2237 published?
CVE-2006-2237 was published on May 4, 2006.