CVE-2010-4369

Related Files

Mandriva Linux Security Advisory 2011-033

Posted Feb 21, 2011

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2011-033 - awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located on a WebDAV server or NFS server. Directory traversal vulnerability in AWStats before 7.0 allows remote attackers to have an unspecified impact via a crafted LoadPlugin directory. The updated packages have been upgraded to the latest version to address these vulnerabilities.

tags | advisory, remote, arbitrary, cgi, vulnerability

systems | linux, mandriva

advisories | CVE-2010-4367, CVE-2010-4369

SHA-256 | 9e4e32cce97beecc5b78553696c4f168221c75fb1d97782e6b9b984727fb3ed4

Download | Favorite | View

Ubuntu Security Notice USN-1047-1

Posted Jan 24, 2010

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 1047-1 - It was discovered that AWStats did not correctly filter the LoadPlugin configuration option. A local attacker on a shared system could use this to inject arbitrary code into AWStats.

tags | advisory, arbitrary, local

systems | linux, ubuntu

advisories | CVE-2010-4369

SHA-256 | b9951f473de622dbf38e911df981e0bcf5401099fb393900dcbd09ae4fccdecd

Download | Favorite | View