Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

AWStats < 6.3 awstats.pl configdir Parameter Remote Command Execution

High

Synopsis

The remote host is running AWStats, a CGI log analyzer.

Description

The remote host is running AWStats, a CGI log analyzer. There are various flaws in the remote version of this software that may allow an attacker to execute code on the remote host.

Solution

Upgrade to AWStats 6.3 or higher.