Lucene search

K
freebsdFreeBSDCE6CE2F8-34AC-11E0-8103-00215C6A37BB
HistoryMay 01, 2010 - 12:00 a.m.

awstats -- arbitrary commands execution vulnerability

2010-05-0100:00:00
vuxml.freebsd.org
16

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.069

Percentile

93.9%

Awstats change log reports:

Security fix (Traverse directory of LoadPlugin)
Security fix (Limit config to defined directory
to avoid access to external config file via a nfs
or webdav link).

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchawstats< 7.0,1UNKNOWN

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.069

Percentile

93.9%

Related for CE6CE2F8-34AC-11E0-8103-00215C6A37BB