Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2023-1396

Критический

ALT-PU-2023-1396: package awstats update to version 7.9-alt0.1

Источник
errata.altlinux.org
Дата публикации
08.03.2023
Дата обновления
08.03.2023
Устраненные уязвимости
3
ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades awstats to version 7.9-alt0.1.

Устраненные уязвимости3

Ссылки1

ALT-PU-2023-1396https://errata.altlinux.org/ALT-PU-2023-1396

Связанные уязвимости

altlinux логотип

ALT-PU-2026-4397

CVSS3: 9.8
altlinux
8 месяцев назад

ALT-PU-2026-4397: package `awstats` update to version 8.0-alt0.1

ubuntu логотип

CVE-2020-29600

CVSS3: 9.8
ubuntu
почти 6 лет назад

In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501.

nvd логотип

CVE-2020-29600

CVSS3: 9.8
nvd
почти 6 лет назад

In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501.

debian логотип

CVE-2020-29600

CVSS3: 9.8
debian
почти 6 лет назад

In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute ...

github логотип

GHSA-43g3-5cf8-2gm2

github
больше 4 лет назад

In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501.