Lucene search
Ubuntu.comUB:CVE-2006-2644HistoryMay 30, 2006 - 12:00 a.m.
CVE-2006-2644
2006-05-3000:00:00
ubuntu.com
ubuntu.com
10
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N
0.012 Low
EPSS
Percentile
85.4%
AWStats 6.5, and possibly other versions, allows remote authenticated users
to execute arbitrary code by using the configdir parameter to awstats.pl to
upload a configuration file whose name contains shell metacharacters, then
access that file using the LogFile directive.
Related
ubuntu
ubuntu
awstats vulnerability
2006-06-08 00:00:00
debiancve
debiancve
CVE-2006-2644
2006-05-30 10:02:00
openvas
openvas
Debian Security Advisory DSA 1075-1 (awstats)
2008-01-17 00:00:00
Ubuntu: Security Advisory (USN-290-1)
2022-08-26 00:00:00
Debian: Security Advisory (DSA-1075-1)
2008-01-17 00:00:00
prion
prion
Default configuration
2006-05-30 10:02:00
cve
cve
CVE-2006-2644
2006-05-30 10:02:00
nessus
nessus
Debian DSA-1075-1 : awstats - programming error
2006-10-14 00:00:00
Ubuntu 5.04 / 5.10 / 6.06 LTS : awstats vulnerability (USN-290-1)
2007-11-10 00:00:00
openSUSE 10 Security Update : awstats (awstats-1612)
2007-10-17 00:00:00
cvelist
cvelist
CVE-2006-2644
2006-05-30 10:00:00
nvd
nvd
CVE-2006-2644
2006-05-30 10:02:00
suse
suse
remote code execution in awstats
2006-06-20 09:02:21
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N
0.012 Low
EPSS
Percentile
85.4%
Related for UB:CVE-2006-2644