Lucene search
HistoryMay 02, 2005 - 4:00 a.m.
CVE-2005-0436
cve
code injection
vulnerability
awstats
7.3 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.014 Low
EPSS
Percentile
86.3%
Direct code injection vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to execute portions of Perl code via the PluginMode parameter.
| CPE | Name | Operator | Version |
|---|---|---|---|
| awstats:awstats | awstats | eq | 6.3 |
| awstats:awstats | awstats | eq | 6.4 |
Related
debiancve
debiancve
CVE-2005-0436
2005-05-02 04:00:00
ubuntucve
ubuntucve
CVE-2005-0436
2005-05-02 00:00:00
securityvulns
securityvulns
nessus
nessus
AWStats Multiple Remote Vulnerabilities (Cmd Exec, Traversal, ID)
2005-02-14 00:00:00
FreeBSD : awstats -- arbitrary command execution (fdad8a87-7f94-11d9-a9e7-0001020eed82)
2005-07-13 00:00:00
Debian DSA-682-1 : awstats - missing input sanitizing
2005-02-16 00:00:00
openvas
openvas
FreeBSD Ports: awstats
2008-09-04 00:00:00
FreeBSD Ports: awstats
2008-09-04 00:00:00
freebsd
freebsd
awstats -- arbitrary command execution
2005-02-10 00:00:00
7.3 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.014 Low
EPSS
Percentile
86.3%
Related for CVE-2005-0436