CVE-2017-1000501
Summary
| CVE | CVE-2017-1000501 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2018-01-03 15:29:00 UTC |
|---|
| Updated | 2020-07-27 03:15:00 UTC |
|---|
| Description | Awstats version 7.6 and earlier is vulnerable to a path traversal flaw in the handling of the "config" and "migrate" parameters resulting in unauthenticated remote code execution. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| AWStats: Multiple vulnerabilities (GLSA 202007-37) — Gentoo security |
GENTOO |
security.gentoo.org |
|
| FIX Security reported by cPanel Security Team (can execute arbitraty · eldy/awstats@cf21984 · GitHub |
CONFIRM |
github.com |
Patch, Third Party Advisory |
| [SECURITY] [DLA 1238-1] awstats security update |
MLIST |
lists.debian.org |
Mailing List, Third Party Advisory |
| AWStats - Open Source Log File Analyzer for advanced statistics (GNU GPL) |
MISC |
www.awstats.org |
Vendor Advisory |
| Debian -- Security Information -- DSA-4092-1 awstats |
DEBIAN |
www.debian.org |
Third Party Advisory |
| Fix another vulnerability reported by cPanel Security Team (can execute · eldy/awstats@06c0ab2 · GitHub |
CONFIRM |
github.com |
Patch, Third Party Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 198370 Ubuntu Security Notification for AWStats vulnerabilities (USN-4953-1)
- 500043 Alpine Linux Security Update for awstats
- 503725 Alpine Linux Security Update for awstats
- 690578 Free Berkeley Software Distribution (FreeBSD) Security Update for awstats (4055aee5-f4c6-11e7-95f2-005056925db4)
