awstats -- remote command execution vulnerability

An iDEFENSE Security Advisory reports:

Remote exploitation of an input validation vulnerability
in AWStats allows attackers to execute arbitrary commands
under the privileges of the web server.
The problem specifically exists when the application is
running as a CGI script on a web server. The “configdir”
parameter contains unfiltered user-supplied data that is
utilized in a call to the Perl routine open()…
Successful exploitation allows remote attackers to
execute arbitrary commands under the privileges of the web
server. This can lead to further compromise as it provides
remote attackers with local access.