Awstats Configuration File Remote Arbitrary Command Execution Vulnerability

Awstats Configuration File Remote Arbitrary Command Execution Vulnerability

Solution:
Currently we are not aware of any official vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: vuldb@securityfocus.commailto:vuldb@securityfocus.com.

Please see the references for third-party vendor advisories and fixes.

AWStats AWStats 6.1

SuSE awstats-6.6-0.1.noarch.rpm
SUSE LINUX 9.1:
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/noarch/awstats-6.6-0.1 .noarch.rpm

SuSE awstats-6.6-0.1.noarch.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/noarch/awstats-6.6-0.1 .noarch.rpm

SuSE awstats-6.6-0.1.noarch.rpm
SUSE LINUX 9.1:
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/noarch/awstats-6.6-0 .1.noarch.rpm

AWStats AWStats 6.3

SuSE awstats-6.6-0.1.noarch.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/noarch/awstats-6.6-0.1 .noarch.rpm

AWStats AWStats 6.4

SuSE awstats-6.6-0.1.noarch.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/noarch/awstats-6.6-0. 1.noarch.rpm

SuSE awstats-6.6-0.1.noarch.rpm
SUSE LINUX 10.1:
ftp://ftp.suse.com/pub/suse/update/10.1/rpm/noarch/awstats-6.6-0.1.noa rch.rpm