CVE-2005-0116

EPSS 74.9%

AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacters in the configdir parameter to aswtats.pl.

Affected products

n/a · n/a

public PoCs found — 5

cve_referencepacketstormsecurity.org/0501-exploits/AWStatsVulnAnalysis.pdfunverified exploitdbwww.exploit-db.com/exploits/773unverified exploitdbwww.exploit-db.com/exploits/772unverified exploitdbwww.exploit-db.com/exploits/16905unverified exploitdbwww.exploit-db.com/exploits/9912unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://awstats.sourceforge.net/docs/awstats_changelog.txt http://packetstormsecurity.org/0501-exploits/AWStatsVulnAnalysis.pdf http://secunia.com/advisories/13893/http://www.idefense.com/application/poi/display?id=185&type=vulnerabilities&flashstatus=false http://www.kb.cert.org/vuls/id/272296 http://www.osvdb.org/13002 http://www.securityfocus.com/bid/12298