USN-1047-1: AWStats vulnerability

Releases

• Ubuntu 10.10
• Ubuntu 10.04
• Ubuntu 9.10
• Ubuntu 8.04
• Ubuntu 6.06

Packages

• awstats -

Details

It was discovered that AWStats did not correctly filter the LoadPlugin
configuration option. A local attacker on a shared system could use this
to inject arbitrary code into AWStats.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 9.10

• awstats - 6.9~dfsg-1ubuntu3.9.10.1

Ubuntu 8.04

• awstats - 6.7.dfsg-1ubuntu0.2

Ubuntu 6.06

• awstats - 6.5-1ubuntu1.4

Ubuntu 10.10

• awstats - 6.9.5~dfsg-3ubuntu0.1

Ubuntu 10.04

• awstats - 6.9~dfsg-1ubuntu3.10.04.1

In general, a standard system update will make all the necessary changes.

References

• CVE-2010-4369