Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2010-4368HistoryOct 03, 2022 - 4:21 p.m.
CVE-2010-4368
2022-10-0316:21:03
Debian Security Bug Tracker
security-tracker.debian.org
14
awstats
vulnerability
awstats.cgi
windows
remote attackers
arbitrary commands
unc share
pathname
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.012
Percentile
85.1%
awstats.cgi in AWStats before 7.0 on Windows accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located at a UNC share pathname.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | awstats | < 7.8-3+deb12u1 | awstats_7.8-3+deb12u1_all.deb |
| Debian | 11 | all | awstats | < 7.8-2+deb11u1 | awstats_7.8-2+deb11u1_all.deb |
| Debian | 999 | all | awstats | < 7.9-1 | awstats_7.9-1_all.deb |
| Debian | 13 | all | awstats | < 7.9-1 | awstats_7.9-1_all.deb |
Related
ubuntucve
ubuntucve
CVE-2010-4368
2010-12-02 00:00:00
prion
prion
Design/Logic Flaw
2010-12-02 16:22:00
cvelist
cvelist
CVE-2010-4368
2022-10-03 16:21:03
nvd
nvd
CVE-2010-4368
2010-12-02 16:22:21
cve
cve
CVE-2010-4368
2022-10-03 16:21:03
openvas
openvas
Awstats Configuration File Remote Arbitrary Command Execution Vulnerability
2010-12-01 00:00:00
Awstats Configuration File Remote Arbitrary Command Execution Vulnerability
2010-12-01 00:00:00
cert
cert
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.012
Percentile
85.1%
Related for DEBIANCVE:CVE-2010-4368