Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2006-2644HistoryMay 30, 2006 - 10:02 a.m.
CVE-2006-2644
2006-05-3010:02:00
Debian Security Bug Tracker
security-tracker.debian.org
10
0.012 Low
EPSS
Percentile
85.3%
AWStats 6.5, and possibly other versions, allows remote authenticated users to execute arbitrary code by using the configdir parameter to awstats.pl to upload a configuration file whose name contains shell metacharacters, then access that file using the LogFile directive.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | awstats | < 6.5-2 | awstats_6.5-2_all.deb |
| Debian | 11 | all | awstats | < 6.5-2 | awstats_6.5-2_all.deb |
| Debian | 10 | all | awstats | < 6.5-2 | awstats_6.5-2_all.deb |
| Debian | 999 | all | awstats | < 6.5-2 | awstats_6.5-2_all.deb |
| Debian | 13 | all | awstats | < 6.5-2 | awstats_6.5-2_all.deb |
Related
openvas
openvas
Debian Security Advisory DSA 1075-1 (awstats)
2008-01-17 00:00:00
Ubuntu: Security Advisory (USN-290-1)
2022-08-26 00:00:00
Debian: Security Advisory (DSA-1075-1)
2008-01-17 00:00:00
ubuntucve
ubuntucve
CVE-2006-2644
2006-05-30 00:00:00
prion
prion
Default configuration
2006-05-30 10:02:00
ubuntu
ubuntu
awstats vulnerability
2006-06-08 00:00:00
nessus
nessus
Ubuntu 5.04 / 5.10 / 6.06 LTS : awstats vulnerability (USN-290-1)
2007-11-10 00:00:00
Debian DSA-1075-1 : awstats - programming error
2006-10-14 00:00:00
SUSE-SA:2006:033: awstats
2007-02-18 00:00:00
cvelist
cvelist
CVE-2006-2644
2006-05-30 10:00:00
cve
cve
CVE-2006-2644
2006-05-30 10:02:00
suse
suse
remote code execution in awstats
2006-06-20 09:02:21