CVE-2005-1527
published 2005-08-15CVE-2005-1527: Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a URLPlugin is enabled, allows remote attackers to execute arbitrary Perl code via…
PriorityP429medium5CVSS 2.0
AVNACLAuNCNIPAN
EPSS
2.67%
84.0th percentile
Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a URLPlugin is enabled, allows remote attackers to execute arbitrary Perl code via the HTTP Referrer, which is used in a $url parameter that is inserted into an eval function call.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| awstats | awstats | <= 6.4 | — |
| awstats | awstats | >= 0 < 6.4-1.1 | 6.4-1.1 |
| awstats | awstats | >= 0 < 6.4-1.1 | 6.4-1.1 |
| awstats | awstats | >= 0 < 6.4-1.1 | 6.4-1.1 |
| awstats | awstats | >= 0 < 6.4-1.1 | 6.4-1.1 |
| canonical | ubuntu_linux | — | — |
| debian | awstats | < awstats 6.4-1.1 (bookworm) | awstats 6.4-1.1 (bookworm) |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
osv5.0MEDIUM
vendor_debian5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-7rg7-c2wp-3xxr: Eval injection vulnerability in awstats
ghsa_unreviewed·2022-05-01
CVE-2005-1527 [MEDIUM] CWE-94 GHSA-7rg7-c2wp-3xxr: Eval injection vulnerability in awstats
Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a URLPlugin is enabled, allows remote attackers to execute arbitrary Perl code via the HTTP Referrer, which is used in a $url parameter that is inserted into an eval function call.
OSV
CVE-2005-1527: Eval injection vulnerability in awstats
osv·2005-08-15·CVSS 5.0
CVE-2005-1527 [MEDIUM] CVE-2005-1527: Eval injection vulnerability in awstats
Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a URLPlugin is enabled, allows remote attackers to execute arbitrary Perl code via the HTTP Referrer, which is used in a $url parameter that is inserted into an eval function call.
Ubuntu
AWStats vulnerability
vendor_ubuntu·2005-08-12
CVE-2005-1527 AWStats vulnerability
Title: AWStats vulnerability
Summary: AWStats vulnerability
Peter Vreugdenhil discovered a command injection vulnerability in
AWStats. As part of the statistics reporting function, AWStats
displays information about the most common referrer values that caused
users to visit the website. Referer URLs could be crafted in a way
that they contained arbitrary Perl code which would have been executed
with the privileges of the web server as soon as some user visited the
referrer statistics page.
Instructions: In general, a standard system update will make all the necessary changes.
Debian
CVE-2005-1527: awstats - Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a UR...
vendor_debian·2005·CVSS 5.0
CVE-2005-1527 [MEDIUM] CVE-2005-1527: awstats - Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a UR...
Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a URLPlugin is enabled, allows remote attackers to execute arbitrary Perl code via the HTTP Referrer, which is used in a $url parameter that is inserted into an eval function call.
Scope: local
bookworm: resolved (fixed in 6.4-1.1)
bullseye: resolved (fixed in 6.4-1.1)
forky: resolved (fixed in 6.4-1.1)
sid: resolved (fixed in 6.4-1.1)
trixie: resolved (fixed in 6.4-1.1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
CWE
Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')
mitre_cwe
CWE-95 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')
CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')
The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call (e.g. "eval").
Modes of Introduction:
Phase: Implementation
Note: REALIZATION: This weakness is caused during implementation of an architectural security tactic.
Phase: Implementation
Note: This weakness is prevalent in handler/dispatch procedures that might want to invoke a large number of functions, or set a large number of variables.
Common Consequences:
Scope: Confidentiality. Impact: Read Files or Directories, Read Application Data. The injected code could access restricted data / files.
Scope: Access Control. Impact:
CWE
Improper Control of Generation of Code ('Code Injection')
mitre_cwe
CWE-94 Improper Control of Generation of Code ('Code Injection')
CWE-94: Improper Control of Generation of Code ('Code Injection')
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
Modes of Introduction:
Phase: Implementation
Note: REALIZATION: This weakness is caused during implementation of an architectural security tactic.
Common Consequences:
Scope: Access Control. Impact: Bypass Protection Mechanism. In some cases, injectable code controls authentication; this may lead to a remote vulnerability.
Scope: Access Control. Impact: Gain Privileges or Assume Identity. Injected code can access resources that the attacker is directly prevented from ac
CWE
Cleartext Storage of Sensitive Information in Executable
mitre_cwe·CVSS 2.1
[LOW] CWE-318 Cleartext Storage of Sensitive Information in Executable
CWE-318: Cleartext Storage of Sensitive Information in Executable
The product stores sensitive information in cleartext in an executable.
Attackers can reverse engineer binary code to obtain secret data. This is especially easy when the cleartext is plain ASCII. Even if the information is encoded in a way that is not human-readable, certain techniques could determine which encoding is being used, then decode the information.
Modes of Introduction:
Phase: Implementation
Common Consequences:
Scope: Confidentiality. Impact: Read Application Data.
Observed Examples:
CVE-2005-1794: Product stores RSA private key in a DLL and uses it to sign a certificate, allowing spoofing of servers and Adversary-in-the-Middle (AITM) attacks.
CVE-2001-1527: administration passwords in cleartext in executa
http://secunia.com/advisories/16412http://secunia.com/advisories/17463http://securitytracker.com/id?1014636http://www.debian.org/security/2005/dsa-892http://www.idefense.com/application/poi/display?id=290&type=vulnerabilities&flashstatus=falsehttp://www.novell.com/linux/security/advisories/2005_19_sr.htmlhttp://www.osvdb.org/18696http://www.securiteam.com/unixfocus/5DP0J00GKE.htmlhttp://www.securityfocus.com/bid/14525https://exchange.xforce.ibmcloud.com/vulnerabilities/21769https://usn.ubuntu.com/167-1/http://secunia.com/advisories/16412http://secunia.com/advisories/17463http://securitytracker.com/id?1014636http://www.debian.org/security/2005/dsa-892http://www.idefense.com/application/poi/display?id=290&type=vulnerabilities&flashstatus=falsehttp://www.novell.com/linux/security/advisories/2005_19_sr.htmlhttp://www.osvdb.org/18696http://www.securiteam.com/unixfocus/5DP0J00GKE.htmlhttp://www.securityfocus.com/bid/14525https://exchange.xforce.ibmcloud.com/vulnerabilities/21769https://usn.ubuntu.com/167-1/
2005-08-15
Published