CVE-2006-3682: Medium severity Awstats AWStats vulnerability
Published Jul 18, 2006
·Updated
awstats.pl in AWStats 6.5 build 1.857 and earlier allows remote attackers to obtain the installation path via the (1) year, (2) pluginmode or (3) month parameters.
Affected Software
1 affected component
Awstats AWStats<=6.5_1.857
Event History
Jul 18, 2006
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-3682?
CVE-2006-3682 is considered a medium severity vulnerability due to information disclosure risks.
2
How do I fix CVE-2006-3682?
To fix CVE-2006-3682, update AWStats to version 6.5 build 1.858 or later.
3
What type of vulnerability is CVE-2006-3682?
CVE-2006-3682 is an information disclosure vulnerability affecting earlier versions of AWStats.
4
Which versions of AWStats are affected by CVE-2006-3682?
AWStats versions 6.5 build 1.857 and earlier are affected by CVE-2006-3682.
5
Can CVE-2006-3682 be exploited remotely?
Yes, CVE-2006-3682 can be exploited remotely by attackers to gain information about the installation path.