CVE-2005-0362 — Awstats vulnerability

5 documents5 sources
Severity
4.6MEDIUMNVD
EPSS
0.2%
top 58.85%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Awstats
Timeline
PublishedFeb 9
Latest updateMay 1

Description

awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) "pluginmode", (2) "loadplugin", or (3) "noloadplugin" parameters.

CVSS vector

AV:L/AC:L/C:P/I:P/A:PExploitability: 3.9 | Impact: 6.4

Affected Packages2 packages

▶Debianawstats/awstats< 6.2-1.2+3
▶NVDawstats/awstats14 versions+13

🔴Vulnerability Details

3
GHSA
GHSA-gxfj-hj3g-hcm2: awstats↗2022-05-01
▶
CVEList
CVE-2005-0362: awstats↗2005-02-16
▶
OSV
CVE-2005-0362: awstats↗2005-02-09
▶

📋Vendor Advisories

1
Debian
CVE-2005-0362: awstats - awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands ...↗2005
▶