CVE-2005-0116

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacters in the configdir parameter to aswtats.pl.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://awstats.sourceforge.net/docs/awstats_changelog.txtPatch, Vendor Advisory
http://packetstormsecurity.org/0501-exploits/AWStatsVulnAnalysis.pdf
http://secunia.com/advisories/13893/Patch, Vendor Advisory
http://www.idefense.com/application/poi/display?id=185&type=vulnerabilities&flashstatus=falseExploit, Patch, Vendor Advisory
http://www.kb.cert.org/vuls/id/272296Patch, Third Party Advisory, US Government Resource
http://www.osvdb.org/13002
http://www.securityfocus.com/bid/12298
http://awstats.sourceforge.net/docs/awstats_changelog.txtPatch, Vendor Advisory
http://packetstormsecurity.org/0501-exploits/AWStatsVulnAnalysis.pdf
http://secunia.com/advisories/13893/Patch, Vendor Advisory
http://www.idefense.com/application/poi/display?id=185&type=vulnerabilities&flashstatus=falseExploit, Patch, Vendor Advisory
http://www.kb.cert.org/vuls/id/272296Patch, Third Party Advisory, US Government Resource
http://www.osvdb.org/13002
http://www.securityfocus.com/bid/12298

Timeline

Published: Jan 18, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-01174.6Buffer overflow in XShisen before 1.36 allows local users to execute arbitrary code via a long GECOS field.CVE-2005-01182.1helvis 1.8h2_1 and earlier stores recovery files in world readable directories with world readable permissions, which allows local users to CVE-2005-01192.1helvis 1.8h2_1 and earlier allows local users to recover and read the files of other users via the elvrec setuid program.CVE-2005-01202.1helvis 1.8h2_1 and earlier allows local users to delete arbitrary files via the elvprsv setuid program.CVE-2005-01214.6Multiple buffer overflows in golddig 2.0 and earlier allow local users to execute arbitrary code via (1) a long map name command line argume CVE-2005-01242.1The coda_pioctl function in the coda functionality (pioctl.c) for Linux kernel 2.6.9 and 2.4.x before 2.4.29 may allow local users to cause CVE-2005-01257.2The "at" commands on Mac OS X 10.3.7 and earlier do not properly drop privileges, which allows local users to (1) delete arbitrary files via CVE-2005-01267.5ColorSync on Mac OS X 10.3.7 and 10.3.8 allows attackers to execute arbitrary code via malformed ICC color profiles that modify the heap.CVE-2005-01275.0Mail in Mac OS X 10.3.7, when generating a Message-ID header, generates a GUUID that includes information that identifies the Ethernet hardw CVE-2005-01297.5The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel name containing "%" var CVE-2005-01307.5Certain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands via shell metacharacters in (1) channel names CVE-2005-01315.0The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided