CVE-2008-3922: Code Injection

Published Sep 4, 2008

Updated

awstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute arbitrary code via PHP sequences in the sort parameter, which is used by the multisort function when dynamically creating an anonymous PHP function.

Affected Software

5 affected components

Telartis Bv Awstats Totals=1.0

Telartis Bv Awstats Totals=1.1

Telartis Bv Awstats Totals=1.11

Telartis Bv Awstats Totals=1.13

Telartis Bv Awstats Totals=1.14

Remediation

Patch Available

http://www.telartis.nl/xcms/awstats/

Event History

Sep 4, 2008

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-3922?

CVE-2008-3922 has a severity rating that indicates it allows remote code execution, making it critical.

How do I fix CVE-2008-3922?

To fix CVE-2008-3922, you should upgrade to a secure version of AWStats Totals that is not affected by this vulnerability.

What types of systems are affected by CVE-2008-3922?

CVE-2008-3922 affects AWStats Totals versions 1.0 through 1.14.

Can CVE-2008-3922 allow unauthorized access?

Yes, CVE-2008-3922 can be exploited by attackers to execute arbitrary code, essentially allowing unauthorized access to the affected system.

Is there a workaround for CVE-2008-3922 if I cannot update immediately?

Temporarily restricting access to the affected script may reduce the risk until a proper update can be applied for CVE-2008-3922.