CVE-2009-5020: Input Validation
Published Dec 2, 2010
·Updated
Open redirect vulnerability in awredir.pl in AWStats before 6.95 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Affected Software
29 affected components
Awstats AWStats<=6.9
Awstats AWStats=1.0
Awstats AWStats=2.1.
Awstats AWStats=2.2.3
Awstats AWStats=2.2.4
Awstats AWStats=3.0
Awstats AWStats=3.1
Awstats AWStats=3.2
Awstats AWStats=4.0
Awstats AWStats=4.1
Awstats AWStats=5.0
Awstats AWStats=5.1
Awstats AWStats=5.2
Awstats AWStats=5.3
Awstats AWStats=5.4
Awstats AWStats=5.5
Awstats AWStats=5.6
Awstats AWStats=5.7
Awstats AWStats=5.8
Awstats AWStats=5.9
Awstats AWStats=6.0
Awstats AWStats=6.1
Awstats AWStats=6.2
Awstats AWStats=6.3
Awstats AWStats=6.4
Awstats AWStats=6.5
Awstats AWStats=6.6
Awstats AWStats=6.7
Awstats AWStats=6.8
Event History
Dec 2, 2010
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-5020?
CVE-2009-5020 has a medium severity rating due to its potential for phishing attacks.
2
How do I fix CVE-2009-5020?
To fix CVE-2009-5020, upgrade to AWStats version 6.95 or later.
3
Which versions of AWStats are affected by CVE-2009-5020?
AWStats versions prior to 6.95, as well as version 1.0, are affected by CVE-2009-5020.
4
What type of attacks can CVE-2009-5020 facilitate?
CVE-2009-5020 can facilitate open redirect attacks, allowing for phishing and redirecting users to malicious websites.
5
Is there a patch available for CVE-2009-5020?
Yes, upgrading to version 6.95 or later effectively patches CVE-2009-5020.