AWStats Remote Command Execution Vulnerability
BID:12298
Info
AWStats Remote Command Execution Vulnerability
| Bugtraq ID: | 12298 |
| Class: | Input Validation Error |
| CVE: |
CVE-2005-0116 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 15 2005 12:00AM |
| Updated: | Dec 13 2006 03:43PM |
| Credit: | The discoverer of this issue wishes to remain anonymous. |
| Vulnerable: |
SuSE Linux 8.1 SuSE Linux 8.0 i386 SuSE Linux 8.0 S.u.S.E. Linux Personal 9.2 S.u.S.E. Linux Personal 9.1 S.u.S.E. Linux Personal 9.0 x86_64 S.u.S.E. Linux Personal 9.0 S.u.S.E. Linux Personal 8.2 Gentoo Linux AWStats AWStats 6.2 AWStats AWStats 6.1 AWStats AWStats 6.0 AWStats AWStats 5.9 AWStats AWStats 5.8 AWStats AWStats 5.7 AWStats AWStats 5.6 AWStats AWStats 5.5 AWStats AWStats 5.4 AWStats AWStats 5.3 AWStats AWStats 5.2 AWStats AWStats 5.1 AWStats AWStats 5.0 |
| Not Vulnerable: |
AWStats AWStats 6.3 |
Discussion
AWStats Remote Command Execution Vulnerability
AWStats is reported prone to a remote arbitrary-command-execution vulnerability because the software fails to sufficiently sanitize user-supplied data.
An attacker can prefix arbitrary commands with the '|' character and have them execute in the context of the server through a URI parameter.
This issue was originally specified in BID 12270 (AWStats Multiple Unspecified Remote Input Validation Vulnerabilities). Due to the availability of further details, it is being assigned a new BID.
AWStats is reported prone to a remote arbitrary-command-execution vulnerability because the software fails to sufficiently sanitize user-supplied data.
An attacker can prefix arbitrary commands with the '|' character and have them execute in the context of the server through a URI parameter.
This issue was originally specified in BID 12270 (AWStats Multiple Unspecified Remote Input Validation Vulnerabilities). Due to the availability of further details, it is being assigned a new BID.
Exploit / POC
AWStats Remote Command Execution Vulnerability
An exploit is not required.
The following proof of concept supplied by <[email protected]> is available:
http://www.example.com/awstats/awstats.pl?configdir=|/bin/ls|
Proof of concept GHCaws.pl has been supplied by GHC.
Proof of concept awexpl.c has been supplied by Thunder <[email protected]>.
An exploit is not required.
The following proof of concept supplied by <[email protected]> is available:
http://www.example.com/awstats/awstats.pl?configdir=|/bin/ls|
Proof of concept GHCaws.pl has been supplied by GHC.
Proof of concept awexpl.c has been supplied by Thunder <[email protected]>.
Solution / Fix
AWStats Remote Command Execution Vulnerability
Solution:
The vendor has released an upgrade to address this issue. Please see the references for more information.
AWStats AWStats 5.0
AWStats AWStats 5.1
AWStats AWStats 5.2
AWStats AWStats 5.3
AWStats AWStats 5.4
AWStats AWStats 5.5
AWStats AWStats 5.6
AWStats AWStats 5.7
AWStats AWStats 5.8
AWStats AWStats 5.9
AWStats AWStats 6.0
AWStats AWStats 6.1
AWStats AWStats 6.2
Solution:
The vendor has released an upgrade to address this issue. Please see the references for more information.
AWStats AWStats 5.0
-
AWStats AWStats 6.3
http://awstats.sourceforge.net/files/awstats-6.3.tgz
AWStats AWStats 5.1
-
AWStats AWStats 6.3
http://awstats.sourceforge.net/files/awstats-6.3.tgz
AWStats AWStats 5.2
-
AWStats AWStats 6.3
http://awstats.sourceforge.net/files/awstats-6.3.tgz
AWStats AWStats 5.3
-
AWStats AWStats 6.3
http://awstats.sourceforge.net/files/awstats-6.3.tgz
AWStats AWStats 5.4
-
AWStats AWStats 6.3
http://awstats.sourceforge.net/files/awstats-6.3.tgz
AWStats AWStats 5.5
-
AWStats AWStats 6.3
http://awstats.sourceforge.net/files/awstats-6.3.tgz
AWStats AWStats 5.6
-
AWStats AWStats 6.3
http://awstats.sourceforge.net/files/awstats-6.3.tgz
AWStats AWStats 5.7
-
AWStats AWStats 6.3
http://awstats.sourceforge.net/files/awstats-6.3.tgz
AWStats AWStats 5.8
-
AWStats AWStats 6.3
http://awstats.sourceforge.net/files/awstats-6.3.tgz
AWStats AWStats 5.9
-
AWStats AWStats 6.3
http://awstats.sourceforge.net/files/awstats-6.3.tgz
AWStats AWStats 6.0
-
AWStats AWStats 6.3
http://awstats.sourceforge.net/files/awstats-6.3.tgz -
SuSE awstats-6.0-22.2.noarch.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/noarch/awstats-6.0-22. 2.noarch.rpm -
SuSE awstats-6.0-22.2.noarch.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/noarch/awstats-6.0-2 2.2.noarch.rpm
AWStats AWStats 6.1
-
AWStats AWStats 6.3
http://awstats.sourceforge.net/files/awstats-6.3.tgz -
SuSE awstats-6.1-4.2.noarch.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/noarch/awstats-6.1-4.2 .noarch.rpm -
SuSE awstats-6.1-4.2.noarch.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.2/rpm/noarch/awstats-6.1-4 .2.noarch.rpm
AWStats AWStats 6.2
-
AWStats AWStats 6.3
http://awstats.sourceforge.net/files/awstats-6.3.tgz
References
AWStats Remote Command Execution Vulnerability
References:
References:
- AWStats Change Log (AWStats)
- AWStats Homepage (AWStats)
- AWStats Remote Command Execution Vulnerability (iDEFENSE)
- AWStats Vulnerability Analysis ([email protected])