Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.56929
Category:Gentoo Local Security Checks
Title:Gentoo Security Advisory GLSA 200606-06 (awstats)
Summary:NOSUMMARY
Description:Description:
The remote host is missing updates announced in
advisory GLSA 200606-06.

AWStats contains a bug in the sanitization of the input parameters which
can lead to the remote execution of arbitrary code.

Solution:
All AWStats users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose '>=net-www/awstats-6.5-r1'

https://secure1.securityspace.com/smysecure/catid.html?in=GLSA%20200606-06
http://bugs.gentoo.org/show_bug.cgi?id=130487

CVSS Score:
5.1

CVSS Vector:
AV:N/AC:H/Au:N/C:P/I:P/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2006-1945
BugTraq ID: 17621
http://www.securityfocus.com/bid/17621
http://security.gentoo.org/glsa/glsa-200606-06.xml
http://pridels0.blogspot.com/2006/04/awstats-65-vuln.html
http://secunia.com/advisories/20496
Common Vulnerability Exposure (CVE) ID: CVE-2006-2237
BugTraq ID: 17844
http://www.securityfocus.com/bid/17844
Debian Security Information: DSA-1058 (Google Search)
http://www.debian.org/security/2006/dsa-1058
http://www.osreviews.net/reviews/comm/awstats
http://www.vuxml.org/freebsd/2df297a2-dc74-11da-a22b-000c6ec775d9.html
http://www.osvdb.org/25284
http://secunia.com/advisories/19969
http://secunia.com/advisories/20170
http://secunia.com/advisories/20186
http://secunia.com/advisories/20710
SuSE Security Announcement: SUSE-SA:2006:033 (Google Search)
http://www.novell.com/linux/security/advisories/2006_33_awstats.html
https://usn.ubuntu.com/285-1/
http://www.vupen.com/english/advisories/2006/1678
XForce ISS Database: awstats-migrate-command-execution(26287)
https://exchange.xforce.ibmcloud.com/vulnerabilities/26287
CopyrightCopyright (c) 2006 E-Soft Inc. http://www.securityspace.com

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2024 E-Soft Inc. All rights reserved.