This update fixes remote code execution vulnerabilities in awstats.
Since backporting awstats fixes is error prone we have upgraded it to upstream version 6.6, which also includes new features. Security issues fixed: - CVE-2006-2237: missing sanitizing of the 'migrate' parameter. #173041 - CVE-2006-2644: missing sanitizing of the 'configdir' parameter. #173041 - Make sure open() only opens files for read/write by adding explicit < and >.

AWStats did not properly sanitize the 'migrate' CGI parameter. If the update of the stats via web front-end is allowed, a remote attacker could execute arbitrary commands on the server with the privileges of the AWStats server.

This does not affect AWStats installations which only build static pages.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-200606-06 (AWStats: Remote execution of arbitrary code)

    Hendrik Weimer has found that if updating the statistics via the     web frontend is enabled, it is possible to inject arbitrary code via a     pipe character in the 'migrate' parameter. Additionally, r0t has     discovered that AWStats fails to properly sanitize user-supplied input     in awstats.pl.
  Impact :

    A remote attacker can execute arbitrary code on the server in the     context of the application running the AWStats CGI script if updating     of the statistics via web frontend is allowed. Nonetheless, all     configurations are affected by a cross-site scripting vulnerability in     awstats.pl, allowing a remote attacker to execute arbitrary scripts     running in the context of the victim's browser.
  Workaround :

    Disable statistics updates using the web frontend to avoid code     injection. However, there is no known workaround at this time     concerning the cross-site scripting vulnerability.

リモートホストは、Perlで書かれた無料のログファイル分析ツールのAWStatsを実行しています。

リモートホストにインストールされているAWStatsのバージョンは、Perl「open()」関数に渡される前に、「migrate」パラメーターに対する入力のサニタイズに失敗します。AWStatsサイト構成ファイルで「AllowToUpdateStatsFromBrowser」が有効になっている場合は、認証されていない攻撃者が、この問題を悪用して、WebサーバーユーザーIDの権限に従って、影響を受けるホストで任意のコードを実行する可能性があります。

遠端主機正在執行 AWStats，這是一個以 Perl 編寫的免費記錄檔分析工具。

遠端主機上安裝的 AWStats 版本未清理「migrate」參數的輸入內容，便將其傳送至 Perl 的「open()」函式。若在 AWStats 網站設定檔中啟用「AllowToUpdateStatsFromBrowser」，未經驗證的攻擊者可利用此問題，在受影響的主機上執行任意程式碼，但這需要具有 Web 伺服器使用者 ID 的權限。

The remote host is running AWStats, a free logfile analysis tool written in Perl.

The version of AWStats installed on the remote host fails to sanitize input to the 'migrate' parameter before passing it to a Perl 'open()' function.  Provided 'AllowToUpdateStatsFromBrowser' is enabled in the AWStats site configuration file, an unauthenticated attacker can exploit this issue to execute arbitrary code on the affected host, subject to the privileges of the web server user id.

Hendrik Weimer discovered that specially crafted web requests can cause awstats, a powerful and featureful web server log analyzer, to execute arbitrary commands.

The remote host is running AWStats, a CGI log analyzer.  There are various content-parsing flaws in the remote version of this software that would allow an attacker to execute code on the remote host.  An attacker exploiting this flaw would only need to be able to generate HTTP requests to the awstats.pl CGI script.  A successful attack would allow the attacker to run system commands with the privileges of the CGI script.

ID	名稱	產品	系列	已發布	已更新	嚴重性
27163	openSUSE 10 Security Update : awstats (awstats-1612)	Nessus	SuSE Local Security Checks	2007/10/17	2021/1/14	medium
21588	Ubuntu 5.04 / 5.10 : awstats vulnerability (USN-285-1)	Nessus	Ubuntu Local Security Checks	2006/5/23	2021/1/19	medium
21667	GLSA-200606-06 : AWStats: Remote execution of arbitrary code	Nessus	Gentoo Local Security Checks	2006/6/8	2021/1/6	medium
21328	AWStatsはパラメーターの任意のコマンド実行を移行します	Nessus	CGI abuses	2006/5/8	2022/4/11	medium
21328	AWStats migrate 參數任意命令執行	Nessus	CGI abuses	2006/5/8	2022/4/11	medium
21328	AWStats migrate Parameter Arbitrary Command Execution	Nessus	CGI abuses	2006/5/8	2022/4/11	medium
22600	Debian DSA-1058-1 : awstats - missing input sanitising	Nessus	Debian Local Security Checks	2006/10/14	2021/1/4	medium
3536	AWStats < 6.6 migrate Variable Command Execution	Nessus Network Monitor	CGI	2004/8/18	2019/3/6	medium

偵測

搜尋 Plugin

medium

medium

medium

medium

medium

medium

medium

medium