Lucene search
MitreCVELIST:CVE-2006-2644HistoryMay 30, 2006 - 10:00 a.m.
CVE-2006-2644
2006-05-3010:00:00
mitre
www.cve.org
5
AWStats 6.5, and possibly other versions, allows remote authenticated users to execute arbitrary code by using the configdir parameter to awstats.pl to upload a configuration file whose name contains shell metacharacters, then access that file using the LogFile directive.
References
bugs.debian.org/cgi-bin/bugreport.cgi?bug=365910
secunia.com/advisories/20164
secunia.com/advisories/20283
secunia.com/advisories/20502
secunia.com/advisories/20710
www.debian.org/security/2006/dsa-1075
www.novell.com/linux/security/advisories/2006_33_awstats.html
www.osreviews.net/reviews/comm/awstats
www.securityfocus.com/bid/18327
www.vupen.com/english/advisories/2006/1998
usn.ubuntu.com/290-1/
Related
debiancve
debiancve
CVE-2006-2644
2006-05-30 10:02:00
ubuntucve
ubuntucve
CVE-2006-2644
2006-05-30 00:00:00
prion
prion
Default configuration
2006-05-30 10:02:00
openvas
openvas
Debian Security Advisory DSA 1075-1 (awstats)
2008-01-17 00:00:00
Ubuntu: Security Advisory (USN-290-1)
2022-08-26 00:00:00
Debian: Security Advisory (DSA-1075-1)
2008-01-17 00:00:00
ubuntu
ubuntu
awstats vulnerability
2006-06-08 00:00:00
nessus
nessus
Ubuntu 5.04 / 5.10 / 6.06 LTS : awstats vulnerability (USN-290-1)
2007-11-10 00:00:00
Debian DSA-1075-1 : awstats - programming error
2006-10-14 00:00:00
openSUSE 10 Security Update : awstats (awstats-1612)
2007-10-17 00:00:00
cve
cve
CVE-2006-2644
2006-05-30 10:02:00
nvd
nvd
CVE-2006-2644
2006-05-30 10:02:00
suse
suse
remote code execution in awstats
2006-06-20 09:02:21