Описание
awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located on a (1) WebDAV server or (2) NFS server.
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | not-affected | 6.5-1ubuntu1.3 |
| devel | not-affected | 6.9.5~dfsg-4 |
| hardy | not-affected | 6.7.dfsg-1ubuntu0.1 |
| karmic | not-affected | 6.9~dfsg-1ubuntu3 |
| lucid | not-affected | 6.9~dfsg-1ubuntu3 |
| maverick | not-affected | 6.9.5~dfsg-3 |
| upstream | released | 7.0 |
Показывать по
EPSS
7.5 High
CVSS2
Связанные уязвимости
awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located on a (1) WebDAV server or (2) NFS server.
awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the ...
awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located on a (1) WebDAV server or (2) NFS server.
EPSS
7.5 High
CVSS2