awstats - missing input sanitising

In addition to CAN-2005-0116 more vulnerabilities have been found in
awstats, a powerful and featureful web server log analyzer with a CGI
frontend. Missing input sanitising can cause arbitrary commands to be
executed.

For the stable distribution (woody) this problem has been fixed in
version 4.0-0.woody.2.

For the unstable distribution (sid) this problem has been fixed in
version 6.2-1.2.

We recommend that you upgrade your awstats package.