CVE-2006-2237

Related Files

AWStats migrate Remote Command Execution

Posted Oct 30, 2009

Authored by patrick | Site metasploit.com

This Metasploit module exploits an arbitrary command execution vulnerability in the AWStats CGI script. AWStats v6.4 and v6.5 are vulnerable. Perl based payloads are recommended with this module. The vulnerability is only present when AllowToUpdateStatsFromBrowser is enabled in the AWstats configuration file (non-default).

tags | exploit, arbitrary, cgi, perl

advisories | CVE-2006-2237

SHA-256 | eacfafaff42c9aa135b638a8e9838be33a68a7ed46514068c7b106f69fe2ac10

Download | Favorite | View

Debian Linux Security Advisory 1058-1

Posted May 22, 2006

Authored by Debian | Site debian.org

Debian Security Advisory 1058-1 - Hendrik Weimer discovered that specially crafted web requests can cause awstats, a powerful and featureful web server log analyzer, to execute arbitrary commands.

tags | advisory, web, arbitrary

systems | linux, debian

advisories | CVE-2006-2237

SHA-256 | bf251c2b8efacad2aecb9fedc70d83cd7632034bd70224a9c351cddfaf835dcf

Download | Favorite | View