CVE-2006-2237

Description (CNA)

The web interface for AWStats 6.4 and 6.5, when statistics updates are enabled, allows remote attackers to execute arbitrary code via shell metacharacters in the migrate parameter.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• http://secunia.com/advisories/20710
• http://secunia.com/advisories/20186
• http://awstats.sourceforge.net/awstats_security_news.php
• http://www.debian.org/security/2006/dsa-1058
• http://secunia.com/advisories/20496
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26287
• http://www.vupen.com/english/advisories/2006/1678
• http://www.osreviews.net/reviews/comm/awstats
• http://secunia.com/advisories/20170
• http://www.osvdb.org/25284
• https://usn.ubuntu.com/285-1/
• http://www.vuxml.org/freebsd/2df297a2-dc74-11da-a22b-000c6ec775d9.html
• http://secunia.com/advisories/19969
• http://security.gentoo.org/glsa/glsa-200606-06.xml
• http://www.novell.com/linux/security/advisories/2006_33_awstats.html
• http://www.securityfocus.com/bid/17844

ADP enrichment