Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2005-0363
HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-0363

2005-05-0204:00:00
NVD-CWE-Other
[email protected]
web.nvd.nist.gov
28
cve-2005-0363
awstats
remote command execution
shell metacharacters
security vulnerability

7.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

71.9%

JSON

awstats.pl in AWStats 4.0 and 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter.

Related

ubuntucve 1
debiancve 1
cvelist 1
checkpoint_advisories 1
cert 1
debian 2
openvas 6
osv 1
gentoo 1
nessus 3
freebsd 1
ubuntucve
ubuntucve
CVE-2005-0363
2005-05-02 00:00:00
debiancve
debiancve
CVE-2005-0363
2005-05-02 04:00:00
cvelist
cvelist
CVE-2005-0363
2005-02-16 05:00:00
checkpoint_advisories
checkpoint_advisories
AWStats Plugin Multiple Remote Command Execution (CVE-2005-0363)
2015-03-16 00:00:00
cert
cert
AWStats fails to validate input supplied to pluginmode parameter
2005-02-25 00:00:00
debian
debian
[SECURITY] [DSA 682-1] New awstats packages fix arbitrary command execution
2005-02-15 00:00:00
[SECURITY] [DSA 682-1] New awstats packages fix arbitrary command execution
2005-02-15 07:24:38
openvas
openvas
Debian Security Advisory DSA 682-1 (awstats)
2008-01-17 00:00:00
Debian: Security Advisory (DSA-682-1)
2008-01-17 00:00:00
Gentoo Security Advisory GLSA 200501-36 (awstats)
2008-09-24 00:00:00
osv
osv
awstats - missing input sanitising
2005-02-15 00:00:00
gentoo
gentoo
AWStats: Remote code execution
2005-01-25 00:00:00
nessus
nessus
GLSA-200501-36 : AWStats: Remote code execution
2005-02-14 00:00:00
FreeBSD : awstats -- arbitrary command execution (fdad8a87-7f94-11d9-a9e7-0001020eed82)
2005-07-13 00:00:00
Debian DSA-682-1 : awstats - missing input sanitizing
2005-02-16 00:00:00
freebsd
freebsd
awstats -- arbitrary command execution
2005-02-10 00:00:00

7.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

71.9%

JSON
Related for CVE-2005-0363
ubuntucve1debiancve1cvelist1checkpoint_advisories1cert1debian2openvas6osv1gentoo1nessus3freebsd1