Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2005-0116
HistoryJan 18, 2005 - 12:00 a.m.

CVE-2005-0116

2005-01-1800:00:00
ubuntu.com
ubuntu.com
9

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.972 High

EPSS

Percentile

99.8%

JSON

AWStats 6.1, and other versions before 6.3, allows remote attackers to
execute arbitrary commands via shell metacharacters in the configdir
parameter to aswtats.pl.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchawstats< 6.5-1ubuntu1.2UNKNOWN
ubuntu6.10noarchawstats< 6.5-2ubuntu1UNKNOWN
ubuntu7.04noarchawstats< 6.5-2ubuntu1UNKNOWN

Related

packetstorm 1
nessus 4
saint 4
cve 1
checkpoint_advisories 2
cert 1
debiancve 1
freebsd 1
openvas 7
osv 1
debian 2
gentoo 1
packetstorm
packetstorm
AWStats configdir Remote Command Execution
2009-10-30 00:00:00
nessus
nessus
AWStats awstats.pl configdir Parameter Arbitrary Command Execution
2005-01-18 00:00:00
FreeBSD : awstats -- remote command execution vulnerability (0f5a2b4d-694b-11d9-a9e7-0001020eed82)
2005-07-13 00:00:00
GLSA-200501-36 : AWStats: Remote code execution
2005-02-14 00:00:00
saint
saint
AWStats configdir parameter command execution
2006-02-14 00:00:00
AWStats configdir parameter command execution
2006-02-14 00:00:00
AWStats configdir parameter command execution
2006-02-14 00:00:00
cve
cve
CVE-2005-0116
2005-01-18 05:00:00
checkpoint_advisories
checkpoint_advisories
Update Protection against AWStats Remote Command Execution Vulnerability
2006-07-05 00:00:00
AWStats configdir Parameter Remote Command Execution (CVE-2005-0116; CVE-2005-0362)
2014-11-24 00:00:00
cert
cert
AWStats fails to properly filter user-supplied input
2005-02-10 00:00:00
debiancve
debiancve
CVE-2005-0116
2005-01-18 05:00:00
freebsd
freebsd
awstats -- remote command execution vulnerability
2004-10-21 00:00:00
openvas
openvas
AWStats 'configdir' Parameter Arbitrary Command Execution Vulnerability
2005-11-03 00:00:00
FreeBSD Ports: awstats
2008-09-04 00:00:00
FreeBSD Ports: awstats
2008-09-04 00:00:00
osv
osv
awstats - missing input sanitising
2005-02-15 00:00:00
debian
debian
[SECURITY] [DSA 682-1] New awstats packages fix arbitrary command execution
2005-02-15 07:24:38
[SECURITY] [DSA 682-1] New awstats packages fix arbitrary command execution
2005-02-15 07:24:38
gentoo
gentoo
AWStats: Remote code execution
2005-01-25 00:00:00

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.972 High

EPSS

Percentile

99.8%

JSON
Related for UB:CVE-2005-0116
packetstorm1nessus4saint4cve1checkpoint_advisories2cert1debiancve1freebsd1openvas7osv1debian2gentoo1